A path traversal vulnerability, CVE-2026-16585, in the Better Messages - Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress allows authenticated administrators to delete arbitrary files on the server by bypassing file path validation, potentially leading to remote code execution.
Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots < 2.15.19
wordpress
web-vulnerability
path-traversal
rce
file-deletion
1r
2t
1c