CVE · High

CVE-2022-33142 — Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots [bp-better-messages] < 1.9.10.58

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2022-33142 Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots [bp-better-messages] < 1.9.10.58 Uncontrolled Resource Consumption High 7.7 < 1.9.10.58 1.9.10.58 2022-08-22

CVE-2022-33142

The Better Messages plugin through version 1.9.10.57 fails to enforce size restrictions on messages, creating a resource exhaustion vulnerability. An authenticated attacker with at least subscriber-level permissions can send excessively large messages to consume server resources and trigger a denial of service condition. The vulnerability was addressed in version 1.9.10.58.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.