Bit Assist <= 1.5.2 - Path Traversal to Authenticated (Subscriber+) Arbitrary File Read via fileID Parameter
2025-02-14 23:52
Arkadiusz HydzikStrategic Overview
StatusPatched in 1.5.3
Affected PluginChat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist
Affected Version
<= 1.5.2CVSS6.5Medium
CVE
CVE-2025-0822Vulnerability Overview
Bit Assist plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.2 via the fileID Parameter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
Technical Analysis
REMEDIATION: Update to version 1.5.3, or a newer patched version --- IDENTIFIER: CWE-23 (Relative Path Traversal) The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as .. that can resolve to a location that is outside of that directory.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C