CVE-2024-13611 - Better Messages WordPress Plugin Sensitive Information Exposure

CVE ID : CVE-2024-13611
Published : March 1, 2025, 9:15 a.m. | 1 hour, 42 minutes ago
Description : The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.9 via the 'bp-better-messages' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/bp-better-messages directory which can contain file attachments included in chat messages.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...