WordPress security by component

Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss

Plugin description

Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Dec 17, 2025; the highest CVE/CNA score is 6.1.

Plugin slug: live-chat-for-wordpress-buddypress-peepso-ultimate-member-buddyboss

Latest vulnerability

CVE-2025-14154: Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss: Cross-site scripting

Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedDec 17, 2025

Safe version guidanceSee mitigation notes

		Safe version
Dec 17, 2025	CVE-2025-14154 Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss: Cross-site scripting Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.1 NVDPending