Vulnerabilities / Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist
Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist vulnerabilities
Advisories WPSec published for Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist. Other sources may list more. Its attack surface: Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-13 | WPSEC-2026-3037 | Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist <= 1.8.4 - Unauthenticated DOM-Based Cross-Site Scripting via Widget Iframe postMessage | Medium 6.1 | 1.8.5 |
License: CC BY 4.0