BA
Product
Bit Assist
5
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 5Low 0
Watch
Add Bit Assist to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-0822 | 6.5 | Feb 15 | Bit Assist <= 1.5.2 - Path Traversal to Authenticated (Subscriber+) Arbitrary File Read via fileID Parameter Affected: before 1.5.3 |
| CVE-2025-0821 | 6.5 | Feb 14 | Bit Assist <= 1.5.2 - Authenticated (Subscriber+) SQL Injection via id Parameter Affected: before 1.5.3 |
| CVE-2024-13791 | 4.9 | Feb 14 | Bit Assist <= 1.5.2 - Path Traversal to Authenticated (Administrator+) Arbitrary File Read via downloadResponseFile Function Affected: before 1.5.3 |
| CVE-2023-51371 | 4.8 | Dec 29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bit Assist Chat Widget: WhatsApp Chat, Facebook Messenger Chat, Telegram Chat… Affected: through 1.1.9 |
| CVE-2023-3667 | 4.8 | Aug 21 | The Bit Assist WordPress plugin before 1.1.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site… Affected: before 1.1.9 |
Showing 5