Known vulnerabilities in the Better Messages plugin
18 security advisories have been published for the Better Messages plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Better Messages - Security Vulnerability (CVE-2026-93899) MEDIUM
- Better Messages - Security Vulnerability (CVE-2026-94376) MEDIUM
- Better Messages - Security Vulnerability (CVE-2026-89334) MEDIUM
- Better Messages - Security Vulnerability (CVE-2026-89093) MEDIUM
- Better Messages - Security Vulnerability (CVE-2026-18555) MEDIUM
- Better Messages - Remote Code Execution (CVE-2026-16585) HIGH
- Better Messages - Cross-Site Scripting (XSS) (CVE-2025-14154) MEDIUM
- Better Messages - Information Disclosure (CVE-2024-13611) HIGH
- Better Messages - Server-Side Request Forgery (SSRF) (CVE-2024-13697) MEDIUM
- Better Messages - Cross-Site Scripting (XSS) (CVE-2024-13612) MEDIUM
- Better Messages - Cross-Site Scripting (XSS) (CVE-2023-49168) MEDIUM
- Better Messages - Server-Side Request Forgery (SSRF) (CVE-2022-41609) MEDIUM
- Better Messages - Security Vulnerability (CVE-2022-40216) MEDIUM
- Better Messages - Cross-Site Request Forgery (CSRF) (CVE-2022-36389) MEDIUM
- Better Messages - Denial of Service (CVE-2022-33142) HIGH
- Better Messages - Cross-Site Request Forgery (CSRF) (CVE-2022-29454) LOW
- Better Messages - Cross-Site Request Forgery (CSRF) (CVE-2021-24809) HIGH
- Better Messages - Cross-Site Scripting (XSS) (CVE-2021-24808) MEDIUM