CVE-2026-42736: Wordplus Bp Better Messages

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Authorization Bypass Through User-Controlled Key vulnerability in wordplus BP Better Messages bp-better-messages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BP Better Messages: from n/a through <= 2.14.16.

Affected products

• Wordplus Bp Better Messages: up to and including 2.14.16

Published 2026-05-27. Last modified 2026-06-17.