Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist

Vulnerabilities 9Slug bit-assistLatest version 1.8.0WordPress.org →

Minimum safe version

1.6.0

Update to 1.6.0 or later to address 9 fixable vulnerabilities

Latest available1.8.0 ✓
Medium 6.5
2025-02-14< 1.5.3

Bit Assist <= 1.5.2 - Authenticated (Subscriber+) SQL Injection via id Parameter

EUVDWordfenceCVE
Medium 6.5
2025-02-15< 1.5.3

Bit Assist <= 1.5.2 - Path Traversal to Authenticated (Subscriber+) Arbitrary File Read via fileID Parameter

EUVDWordfenceCVE
Medium 5.9
2024-12-26< 1.2

WordPress Bit Assist Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEWPScan
N/A
2023-09-19< 1.2

WordPress Bit Assist Plugin < 1.2 is vulnerable to Cross Site Scripting (XSS)

Patchstack
N/A
2023-09-18< 1.2

Bit Assist <= 1.1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting

Wordfence