wordplus records
11 published records for vendor wordplus.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 9.1%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-352 Cross-Site Request Forgery (CSRF)3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-918 Server-Side Request Forgery (SSRF)2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-284 Improper Access Control1
- CWE-400 Uncontrolled Resource Consumption1
The weakness classes this vendor ships most often: where to look.
CWEAll records
11 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2021-24809No exploit | BP Better Messages < 1.9.9.41 - Multiple CSRFwordplus · better messages · CWE-352 | High8.8 | — | 0.7% | Nov 1, 2021 |
35Monitor | CVE-2022-41609No exploit | WordPress Better Messages plugin <= 1.9.10.68 - Server-Side Request Forgery (SSRF) vulnerabilitywordplus · better messages · CWE-918 | High8.8 | — | 0.6% | Nov 18, 2022 |
35Monitor | CVE-2022-36389No exploit | WordPress Better Messages plugin <= 1.9.9.148 - Cross-Site Request Forgery (CSRF) vulnerabilitywordplus · better messages · CWE-352 | High8.8 | — | 0.4% | Aug 23, 2022 |
30Monitor | CVE-2024-13611No exploit | Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.6.9 - Unauthenticated Sensitive Information Exposure Through Unprwordplus · better messages · CWE-200 | High7.5 | — | 0.5% | Mar 1, 2025 |
26Monitor | CVE-2022-33142No exploit | WordPress Better Messages plugin <= 1.9.10.57 - Denial Of Service (DoS) vulnerabilitywordplus · better messages · CWE-400 | Medium6.5 | — | 1.1% | Aug 23, 2022 |
26Monitor | CVE-2022-40216No exploit | WordPress Better Messages plugin <= 1.9.10.69 - Auth. Messaging Block Bypass vulnerabilitywordplus · better messages · CWE-284 | Medium6.5 | — | 0.5% | Nov 18, 2022 |
26Monitor | CVE-2024-13697No exploit | Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.7.4 - Unauthenticated Limited Server-Side Request Forgery in nicewordplus · better messages · CWE-918 | Medium6.5 | — | 0.3% | Mar 1, 2025 |
24Monitor | CVE-2021-24808No exploit | BP Better Messages < 1.9.9.41 - Reflected Cross-Site Scriptingwordplus · better messages · CWE-79 | Medium6.1 | — | 0.9% | Nov 1, 2021 |
21Monitor | CVE-2023-49168No exploit | WordPress BP Better Messages Plugin <= 2.4.0 is vulnerable to Cross Site Scripting (XSS)wordplus · better messages · CWE-79 | Medium5.4 | — | 0.4% | Dec 14, 2023 |
21Monitor | CVE-2024-13612No exploit | Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting viwordplus · better messages · CWE-79 | Medium5.4 | — | 0.3% | Feb 1, 2025 |
17Monitor | CVE-2022-29454No exploit | WordPress Better Messages plugin <= 1.9.9.148 - Cross-Site Request Forgery (CSRF) vulnerabilitywordplus · better messages · CWE-352 | Medium4.3 | — | 0.3% | Jul 20, 2022 |
- CVE-2021-2480935Monitor
BP Better Messages < 1.9.9.41 - Multiple CSRF
HighCVSS 8.8No exploitEPSS 1%wordplus · better messagesNov 1, 2021
- CVE-2022-4160935Monitor
WordPress Better Messages plugin <= 1.9.10.68 - Server-Side Request Forgery (SSRF) vulnerability
HighCVSS 8.8No exploitEPSS 1%wordplus · better messagesNov 18, 2022
- CVE-2022-3638935Monitor
WordPress Better Messages plugin <= 1.9.9.148 - Cross-Site Request Forgery (CSRF) vulnerability
HighCVSS 8.8No exploitEPSS 0%wordplus · better messagesAug 23, 2022
- CVE-2024-1361130Monitor
Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.6.9 - Unauthenticated Sensitive Information Exposure Through Unpr
HighCVSS 7.5No exploitEPSS 0%wordplus · better messagesMar 1, 2025
- CVE-2022-3314226Monitor
WordPress Better Messages plugin <= 1.9.10.57 - Denial Of Service (DoS) vulnerability
MediumCVSS 6.5No exploitEPSS 1%wordplus · better messagesAug 23, 2022
- CVE-2022-4021626Monitor
WordPress Better Messages plugin <= 1.9.10.69 - Auth. Messaging Block Bypass vulnerability
MediumCVSS 6.5No exploitEPSS 0%wordplus · better messagesNov 18, 2022
- CVE-2024-1369726Monitor
Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.7.4 - Unauthenticated Limited Server-Side Request Forgery in nice
MediumCVSS 6.5No exploitEPSS 0%wordplus · better messagesMar 1, 2025
- CVE-2021-2480824Monitor
BP Better Messages < 1.9.9.41 - Reflected Cross-Site Scripting
MediumCVSS 6.1No exploitEPSS 1%wordplus · better messagesNov 1, 2021
- CVE-2023-4916821Monitor
WordPress BP Better Messages Plugin <= 2.4.0 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 5.4No exploitEPSS 0%wordplus · better messagesDec 14, 2023
- CVE-2024-1361221Monitor
Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting vi
MediumCVSS 5.4No exploitEPSS 0%wordplus · better messagesFeb 1, 2025
- CVE-2022-2945417Monitor
WordPress Better Messages plugin <= 1.9.9.148 - Cross-Site Request Forgery (CSRF) vulnerability
MediumCVSS 4.3No exploitEPSS 0%wordplus · better messagesJul 20, 2022