CVE-2024-13791

CVE-2024-13791 (Bit Assist for WordPress) is a path traversal vulnerability that affects Bit Assist up to version 1.5.2. An authenticated attacker with Administrator-level access can use downloadResponseFile() to read arbitrary server files containing sensitive information. Connected sources indi...

CVE-2023-3667

CVE-2023-3667 describes a stored cross-site scripting (XSS) vulnerability in the Bit Assist WordPress plugin prior to version 1.1.9. The issue arises because the plugin does not sanitize and escape several settings, enabling high-privilege users (e.g., admins) to inject scripts even when unfilter...