Approved changes feed: RSS · Atom

cpe:2.3:a:wordplus:bp_better_messages:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWordplus (20233aaf-1766-50ba-94a7-42ba15a20cb6)
ProductBp Better Messages (55148410-92f4-5d2e-b04d-5bdba535b535)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/projectkarol/bp-better-messages purl2cpe 2026-06-01 10:12:59.128229

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-42736 vulnerable 2026-06-08 08:03:16.621211 WordPress BP Better Messages plugin <= 2.14.16 - Insecure Direct Object References (IDOR) vulnerability
HIGH (7.5)
Authorization Bypass Through User-Controlled Key vulnerability in wordplus BP Better Messages bp-better-messages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BP Better Messages: from n/a through <= 2.14.16.
Published: 2026-05-27T09:49:04.452Z
Updated: 2026-05-27T10:52:23.925Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32802 vulnerable 2026-06-08 06:37:24.038005 WordPress Better Messages plugin <= 2.4.32 - Broken Authentication vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in WordPlus BP Better Messages allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BP Better Messages: from n/a through 2.4.32.
Published: 2024-05-17T09:38:31.510Z
Updated: 2026-04-28T16:09:40.539Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.