Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: bitpressadmin Component: Bit Assist Clear all filters
TI-2025-00693 CVE-2025-0821 · GHSA-hx88-m6jr-73jm

Bit Assist <= 1.5.2 - Authenticated (Subscriber+) SQL Injection via id Parameter

Priority LOW 30

Bit Assist plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.5.2 due to insufficient escaping on the user supplied parameter and lack of suffici…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00568 Published 2025-02-14 No fix listed CWE-89
TI-2023-28029 CVE-2023-51371 · GHSA-v2xm-vc3c-5672

WordPress Bit Assist Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bit Assist Chat Widget: WhatsApp Chat, Facebook Messenger Chat, Telegram Chat Bubble, Line Messenger, Live Chat Suppor…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00328 Published 2023-12-29 No fix listed CWE-79
TI-2023-03424 CVE-2023-3667 · GHSA-9734-j346-qfpf

Bit Assist < 1.1.9 - Admin+ Stored Cross-Site Scripting

Priority MEDIUM 55

The Bit Assist WordPress plugin before 1.1.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00442 Published 2023-08-21 Fixed in 1.1.9