What’s Vulnerable › Products

bitpressadmin Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assi vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your bitpressadmin Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assi version is affected

Latest bitpressadmin Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assi vulnerabilities

• CVE-2025-68596 — WordPress Bit Assist plugin <= 1.5.11 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2025-30834 — WordPress Bit Assist plugin <= 1.5.4 - Path Traversal vulnerability (CVSS 7.5)
• CVE-2025-0822 — Bit Assist <= 1.5.2 - Path Traversal to Authenticated (Subscriber+) Arbitrary File Read via fileID Parameter (CVSS 6.5)
• CVE-2025-0821 — Bit Assist <= 1.5.2 - Authenticated (Subscriber+) SQL Injection via id Parameter (CVSS 6.5)
• CVE-2024-13791 — Bit Assist <= 1.5.2 - Path Traversal to Authenticated (Administrator+) Arbitrary File Read via downloadResponseFile Function (CVSS 4.9)
• CVE-2023-51371 — WordPress Bit Assist Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS) (CVSS 4.8)
• CVE-2023-3667 — Bit Assist < 1.1.9 - Admin+ Stored Cross-Site Scripting (CVSS 4.8)