BA
Product
Bit Assist
5
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 5Low 0
Watch
Add Bit Assist to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-0822 | 6.5 | Feb 15 | Bit Assist plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.2 via the fileID Parameter Affected: before 1.5.3 |
| CVE-2025-0821 | 6.5 | Feb 14 | Bit Assist plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.5.2 due to insufficient escaping on the… Affected: before 1.5.3 |
| CVE-2024-13791 | 4.9 | Feb 14 | Bit Assist plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.2 via the downloadResponseFile() function Affected: before 1.5.3 |
| CVE-2023-51371 | 4.8 | Dec 29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bit Assist Chat Widget: WhatsApp Chat, Facebook Messenger Chat, Telegram Chat… Affected: through 1.1.9 |
| CVE-2023-3667 | 4.8 | Aug 21 | The Bit Assist WordPress plugin before 1.1.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site… Affected: before 1.1.9 |
Showing 5