https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-13697.htmlhttps://patchthecve.com/cve/CVE-2024-13697.htmlWed, 17 Jun 2026 07:02:33 +0000MEDIUM 4.8: The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.7.4 via the 'nice_links'. This makes it possible for unauthenticated attackers to make web requests https://patchthecve.com/cve/CVE-2024-13611.htmlhttps://patchthecve.com/cve/CVE-2024-13611.htmlWed, 17 Jun 2026 07:02:22 +0000HIGH 7.5: The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.9 via the 'bp-better-messages' directory. This makes it possible for unauthenticated attackers https://patchthecve.com/cve/CVE-2024-13612.htmlhttps://patchthecve.com/cve/CVE-2024-13612.htmlWed, 17 Jun 2026 07:02:22 +0000MEDIUM 6.4: The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'better_messages_live_chat_button' shortcode in all versions up to, and including, 2.6.9 due to insufficient input sanitiza