Better Messages – Live Chat, Chat Rooms, Real-Time Messaging & Private Messages

Vulnerabilities 19Slug bp-better-messagesLatest version 2.15.3WordPress.org →

Minimum safe version

2.10.3

Update to 2.10.3 or later to address 19 fixable vulnerabilities

Latest available2.15.3 ✓
Medium 6.4
2025-02-03< 2.7.0

WordPress BP Better Messages Plugin <= 2.6.9 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEEUVDWordfence
Medium 6.3
2024-10-16< 1.9.9.170

Freemius SDK <= 2.4.2 - Missing Authorization Checks

CVE
N/A
2023-07-18< 2.1.21

WordPress BP Better Messages Plugin < 2.1.21 is vulnerable to Cross Site Scripting (XSS)

PatchstackWPScanCVE
N/A
2022-03-04< 1.9.9.170

Freemius SDK <= 2.4.2 - Missing Authorization Checks

Wordfence
Medium 4.3
2023-01-18< 1.9.9.149

WordPress BP Better Messages Plugin <= 1.9.9.148 is vulnerable to Cross Site Request Forgery (CSRF)

PatchstackCVEWordfenceWPScan
Low 3.1
2023-01-18< 1.9.9.149

WordPress BP Better Messages Plugin <= 1.9.9.148 is vulnerable to Cross Site Request Forgery (CSRF)

PatchstackCVEWordfenceWPScan
N/A
2022-02-28< 1.9.9.170

WordPress BP Better Messages plugin < 1.9.9.170 - Sensitive Information Disclosure vulnerability

Patchstack
N/A
2022-02-28< 1.9.9.170

WordPress BP Better Messages plugin < 1.9.9.170 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Patchstack