Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Better Messages – Live Chat, Chat Rooms, Real-Time Messaging & Private Messages — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in Better Messages – Live Chat, Chat Rooms, Real-Time Messaging & Private Messages, with AI-generated Chinese analysis, references, and POCs.

Vendor: wordplus

CVE IDTitleCVSSSeverityPublished
CVE-2025-14154 Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.10.2 - Unauthenticated Stored Cross-Site Scripting CWE-79 6.1 Medium2025-12-17
CVE-2024-13697 Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.7.4 - Unauthenticated Limited Server-Side Request Forgery in nice_links CWE-918 4.8 Medium2025-03-01
CVE-2024-13611 Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.6.9 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory CWE-200 7.5 High2025-03-01
CVE-2024-13612 Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79 6.4 Medium2025-02-01

All 4 known CVE vulnerabilities affecting Better Messages – Live Chat, Chat Rooms, Real-Time Messaging & Private Messages with full Chinese analysis, references, and POCs where available.