# Better Messages <= 3.0.14 - Authenticated (Subscriber+) Sensitive Information Exposure via 'reply_to' Message Meta in AI Chat Bot Conversations

- **ID:** WPSEC-2026-1116
- **Plugin:** Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots (`bp-better-messages`), https://wordpress.org/plugins/bp-better-messages/
- **Affected versions:** all versions before 3.1.0
- **Fixed in:** 3.1.0 (Update to 3.1.0 or later.)
- **Severity:** Low 3.1 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N)
- **Weakness:** CWE-639
- **Usage among sites WPSec scans:** plugin Low, affected versions None seen (as of 2026-10-16)
- **Attack surface analysis:** https://attacksurface.wpsec.com/plugin/bp-better-messages
- **Fix released:** 2026-10-15
- **Published:** 2026-10-16
- **URL:** https://wpsec.com/vuln/WPSEC-2026-1116/

## Description

The Better Messages plugin for WordPress is vulnerable to Sensitive Information Exposure via the 'reply_to' message meta in all versions up to, and including, 3.0.14. This is due to the plugin not checking that a replied-to message belongs to the same conversation, while the AI chat bot reply context loads the replied-to message by ID and adds its text and attachments to the bot prompt. This makes it possible for authenticated attackers with Subscriber-level access or above who can message an AI chat bot to get the bot to reveal the content of messages from conversations they do not belong to.

## References

- https://wpsec.com/vuln/WPSEC-2026-1116/
- https://plugins.svn.wordpress.org/bp-better-messages/tags/3.1.0/
- https://wordpress.org/plugins/bp-better-messages/

Source: WPSec, https://wpsec.com/vuln/WPSEC-2026-1116/

License: CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). Free to use, share and adapt, also commercially, if you credit WPSec and link to this advisory.