CVE-2026-89093 | wordplus Better Messages Plugin up to 2.15.33 on WordPress Guest Registration is_ai_bot_user X-Real-IP information disclosure

A vulnerability classified as problematic has been found in wordplus Better Messages Plugin up to 2.15.33 on WordPress. Affected by this vulnerability is the function is_ai_bot_user of the component Guest Registration. Performing a manipulation of the argument X-Real-IP results in information disclosure.

This vulnerability is reported as CVE-2026-89093. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More