Known vulnerabilities in Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist

Floating sticky chat button for WhatsApp Chat, Facebook Messenger, Telegram, Instagram, SMS, Call, Discord chat, TikTok, Line & 30+ channels

8Reported vulnerabilities

9.8Highest CVSS score

1.8.3Latest version

10,000+Active installs

What to do now

Update Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist to 1.8.2 or later. 8 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 29, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2026-16548	Critical 9.8	0.4%	1.8.1 and earlier	`1.8.2`	July 27, 2026
CVE-2023-3667	Medium 4.8	0.4%	Before 1.1.9	`1.1.9`	August 21, 2023
CVE-2025-0822	Medium 6.5	0.6%	Before 1.5.3	`1.5.3`	February 15, 2025
CVE-2025-0821	Medium 6.5	0.6%	Before 1.5.3	`1.5.3`	February 14, 2025
CVE-2025-30834	Medium 5.8	0.5%	1.5.4 and earlier	`1.5.5`	March 28, 2025
CVE-2025-68596	Medium 5.3	0.3%	1.5.11 and earlier	`1.6.0`	December 19, 2025
CVE-2024-13791	Medium 4.9	0.7%	Before 1.5.3	`1.5.3`	February 14, 2025
CVE-2023-51371	Medium 4.4	0.3%	Before 1.2	`1.2`	September 18, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.