Security Advisory

CVE-2026-39070

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-28 00:00:00

Last updated 2026-09-01 19:06:07

Assigner mitre

CVSS score 4.8

State PUBLISHED

Description

WordPress plugin (Bit Assist) before 1.7.2 is affected by Stored Cross-Site Scripting in Call-To-Action feature. An authenticated attacker with the privileged role (admin) can exploit this to redirect user to malicious site or control the account.

← Browse all CVEs View on cve.org ↗