CVE intelligence

CVE-2026-87764

The BuddyPress Instant Chat WordPress plugin through 1.6 does not check that the sender of a chat message belongs to the conversation it is

Published 2026-10-11 · CVSS high

NIST record