Read the docs

bitpressadmin

Records48All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high19CVSS 7.0–8.9

Exploited now

bitpressadmin records in CISA KEV

No bitpressadmin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Contact Form Builder 8 records MEDIUM Bit Form 6 records HIGH Bit Assist 5 records MEDIUM File Manager 4 records MEDIUM

Records

5 records in Bit Assist · all components

TI-2023-03424 CVE-2023-3667 · GHSA-9734-j346-qfpf

Bit Assist < 1.1.9 - Admin+ Stored Cross-Site Scripting

Priority MEDIUM 55

The Bit Assist WordPress plugin before 1.1.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00442 Published 2023-08-21 Fixed in 1.1.9
TI-2025-00693 CVE-2025-0821 · GHSA-hx88-m6jr-73jm

Bit Assist <= 1.5.2 - Authenticated (Subscriber+) SQL Injection via id Parameter

Priority LOW 30

Bit Assist plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.5.2 due to insufficient escaping on the user supplied parameter and lack of suffici…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00568 Published 2025-02-14 No fix listed CWE-89
TI-2023-28029 CVE-2023-51371 · GHSA-v2xm-vc3c-5672

WordPress Bit Assist Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bit Assist Chat Widget: WhatsApp Chat, Facebook Messenger Chat, Telegram Chat Bubble, Line Messenger, Live Chat Suppor…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00328 Published 2023-12-29 No fix listed CWE-79
Open these records in search →