CVE-2025-0821

CVE-2025-0821 Bit Assist for WordPress: The Bit Assist plugin is vulnerable to a time-based SQL Injection via the id parameter in all versions up to 1.5.2. An authenticated attacker with Subscriber+ privileges can inject additional SQL into existing queries to exfiltrate data. The CVE entry notes...

CVE-2025-0822

CVE-2025-0822 : The Bit Assist WordPress plugin is vulnerable to a path traversal issue via the fileID parameter, allowing authenticated users with Subscriber+ privileges to read arbitrary server files. Affected: Bit Assist plugin versions up to and including 1.5.2. Impact: potential exposure of ...