https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 17:04:12 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-372540 EUVD-2026-372540 https://cve.radiocsirt.org/vuln/euvd-2026-372540 https://cve.radiocsirt.org/vuln/fkie_cve-2026-89334 <p>The Better Messages – Chat Rooms, Group Chat, Private Messages &amp; AI Chat Bots plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.15.33. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with custom-level access and above, to access the full message transcript, thread metadata, and user data of any chat-room thread without authentication. This is only exploitable when the chat room&#39;s only_joined_can_read setting retains its default value of &#39;0&#39;.</p> <p>The Better Messages – Chat Rooms, Group Chat, Private Messages &amp; AI Chat Bots plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.15.33. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with custom-level access and above, to access the full message transcript, thread metadata, and user data of any chat-room thread without authentication. This is only exploitable when the chat room&#39;s only_joined_can_read setting retains its default value of &#39;0&#39;.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-89334 https://cve.radiocsirt.org/vuln/ghsa-4f44-p79q-6vj4 <p>The Better Messages – Chat Rooms, Group Chat, Private Messages &amp; AI Chat Bots plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.15.33. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with custom-level access and above, to access the full message transcript, thread metadata, and user data of any chat-room thread without authentication. This is only exploitable when the chat room&#39;s only_joined_can_read setting retains its default value of &#39;0&#39;.</p> <p>The Better Messages – Chat Rooms, Group Chat, Private Messages &amp; AI Chat Bots plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.15.33. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with custom-level access and above, to access the full message transcript, thread metadata, and user data of any chat-room thread without authentication. This is only exploitable when the chat room&#39;s only_joined_can_read setting retains its default value of &#39;0&#39;.</p> https://cve.radiocsirt.org/vuln/ghsa-4f44-p79q-6vj4