WordPress Plugin Vulnerabilities

Better Messages < 1.9.10.71 - Subscriber+ Messaging Block Bypass

Description

The plugin does not properly block messages, which could allow subscriber and above role to bypass the block system in place

Affects Plugins

Plugin icon
bp-better-messages
Fixed in 1.9.10.71

References

CVE
CVE-2022-40216

Miscellaneous

Original Researcher
Dhakal Ananda
Verified
No
WPVDB ID
8badce5d-1a0a-4713-897f-d26e11ae1291

Timeline

Publicly Published
2022-11-09 (about 3 years ago)
Added
2022-11-20 (about 3 years ago)
Last Updated
2022-11-20 (about 3 years ago)

Other

Published
Title
Published
2022-08-08
Title
Stop Spam Comments <= 0.2.1.2 - Access Token Bypass
Published
2022-12-29
Title
Passster < 3.5.5.9 - Protection Bypass & Arbitrary Post Access
Published
2022-11-21
Title
All In One WP Security & Firewall < 5.0.8 - IP Spoofing
Published
2022-04-28
Title
Countdown & Clock <= 3.0.8 - Pro Features Lock Bypass
Published
2023-10-24
Title
YOP Poll < 6.5.29 - Reusable Captcha via validateImage