BP Better Messages vulnerabilities

2 known vulnerabilities in BP Better Messages from WordPlus. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  BP Better Messages: Improper Neutralization of Input During Web Page Generation

  CVE-2026-114179Oct 24, 2026WordPlus

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wordplus BP Better Messages bp-better-messages allows DOM-Based XSS.This issue affects BP Better Messages: from n/a through 3.1.3.

• 7.5 High severity

  BP Better Messages: Authorization Bypass Through User-Controlled Key

  CVE-2026-42736May 27, 2026WordPlus

  Authorization Bypass Through User-Controlled Key vulnerability in wordplus BP Better Messages bp-better-messages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BP Better Messages: from n/a through <= 2.14.16.