CVE-2026-39070

CVE-2026-39070 affects the Bit Assist WordPress plugin prior to version 1.7.2 . The vulnerability is a Stored Cross-Site Scripting (XSS) in the Call-To-Action feature. Exploitation requires an authenticated admin role, which limits the attack surface but still poses a significant risk if admin cr...