Bit Apps BitApps Bit Assist 1.1.9 for WordPress

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs

Bit Assist <= 1.5.2 - Path Traversal to Authenticated (Subscriber+) Arbitrary File Read via fileID Parameter

Published 2025-02-15 · Analyzed

6.5EPSS 0.006

Bit Assist <= 1.5.2 - Authenticated (Subscriber+) SQL Injection via id Parameter

Published 2025-02-14 · Analyzed

6.5EPSS 0.006

WordPress Bit Assist Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)

Published 2023-12-29 · Modified

5.9EPSS 0.003

Bit Assist <= 1.5.2 - Path Traversal to Authenticated (Administrator+) Arbitrary File Read via downloadResponseFile Function

Published 2025-02-14 · Analyzed

4.9EPSS 0.007

Bit Assist < 1.1.9 - Admin+ Stored Cross-Site Scripting

Published 2023-08-21 · Modified

4.8EPSS 0.004