CVE-2026-16585highCWE-22

CVE-2026-16585: falha de alta gravidade em wordplus Better Messages – Chat Rooms, Group…

Better Messages <= 2.15.19 - Authenticated (Administrator+) Arbitrary File Deletion via Path Traversal via 'file' Parameter

Publicada em

Seguir esta CVE+ Monitorar Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.2epss 1.2%
The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_sticker function in all versions up to, and including, 2.15.19. This makes it possible for authenticated attackers, with administrator-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). The prefix check intended to restrict deletion to the uploads directory can be bypassed by crafting a URL that begins with the legitimate uploads base URL but embeds ../ traversal sequences in the path portion, as the normalize_sticker function only applies esc_url_raw(), which does not strip ../ sequences, allowing the traversal payload to be stored verbatim in WordPress options.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
wordplus · Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots
CVEs relacionadas — wordplus Better Messages – Chat Rooms, Group…

No mesmo produto, das mais perigosas para as menos.

CVE-2026-89334MEDIUMBetter Messages <= 2.15.33 - Missing Authorization to Authenticated (Custom+) Chat-Room Transcript Disclosure via '/thread/<id>' REST EndpointEPSS 0.7%CVE-2026-89093MEDIUMBetter Messages <= 2.15.33 - Unauthenticated Information Exposure Spoofing via 'X-Real-IP' Header via /guests/registerEPSS 0.3%CVE-2026-18555MEDIUMBetter Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress <= 2.15.22 - Reflected Cross-Site Scripting via 'icn' ParameterEPSS 0.3%CVE-2026-93899MEDIUMBetter Messages <= 3.0.4 - Authenticated (Subscriber+) SQL Injection via 'group_id' Message Meta ParameterEPSS 0.3%CVE-2026-94376MEDIUMBetter Messages <= 3.0.4 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via User Display NameEPSS 0.2%