The Better Messages plugin for WordPress is not secure in versions up to 1.9.10.68. This means that people with limited user privileges can go around the messaging blocks that are supposed to be in place. This is because the plugin has either weak or broken controls.