{"affected":[{"defaultStatus":"unaffected","ecosystem":"https://wordpress.org/plugins","packageName":"bit-assist","product":"Bit Assist","source":"CNA: Patchstack","vendor":"Bit Apps","versions":[{"changes":[{"at":"1.6.0","status":"unaffected"}],"lessThanOrEqual":"1.5.11","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2025-68596","cwes":["CWE-862"],"description":"Missing Authorization vulnerability in Bit Apps Bit Assist bit-assist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bit Assist: from n/a through <= 1.5.11.","epss":{"date":"2026-11-03","percentile":0.19337,"score":0.0027},"exploits":[],"kev":null,"metrics":[{"score":5.3,"severity":"medium","source":"CNA: Patchstack","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"}],"modifiedAt":1793751325683,"publishedAt":1766581845364,"references":[{"source":"CNA: Patchstack","tags":["vdb-entry"],"url":"https://patchstack.com/database/Wordpress/Plugin/bit-assist/vulnerability/wordpress-bit-assist-plugin-1-5-11-broken-access-control-vulnerability?_s_id=cve"}],"remediation":[],"revision":"f5b06c83a8258120f2a75f43c1d8a55772e785aeac9c9554a90794e926b5465e","sources":[{"modifiedAt":1793751325683,"name":"CNA: Patchstack","retrievedAt":1793754633580,"url":"https://www.cve.org/CVERecord?id=CVE-2025-68596"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793748165255,"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-68596"}],"ssvc":{"assessedAt":1777315887126,"automatable":"yes","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"WordPress Bit Assist plugin <= 1.5.11 - Broken Access Control vulnerability","updatedAt":1793754633580}