All products
bit-form
WordPress · Plugin28 reports| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|
| Bit Form <= 3.1.0 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-16573 |
bit-form |
WordPress |
High
|
Fix reported |
|
| Bit Form <= 3.2.0 - Authenticated (Administrator+) SQL Injection via 'filterText' ParameterCVE-2026-16810 |
bit-form |
WordPress |
Medium
|
Fix reported |
|
| Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder < 3.1.4 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2025-15669 |
bit-form |
WordPress |
Medium
|
Fix reported |
|
| Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder < 3.1.2 - Missing Authorization to Unauthenticated Unauthorized Form SubmissionCVE-2026-15054 |
bit-form |
WordPress |
Medium
|
Fix reported |
|
| Bit Form <= 3.0.0 - Unauthenticated Arbitrary File ReadCVE-2026-13693 |
bit-form |
WordPress |
High
|
Fix reported |
|
| Bit Form <= 3.0.0 - Missing AuthorizationCVE-2026-13694 |
bit-form |
WordPress |
Medium
|
Fix reported |
|
| Bit Form <= 3.1.1 - Authenticated (Subscriber+) Arbitrary File Deletion via '_old' ParameterCVE-2026-14372 |
bit-form |
WordPress |
High
|
Fix reported |
|
| Bit Form <= 2.21.10 - Authenticated (Administrator+) SQL InjectionCVE-2026-25418 |
bit-form |
WordPress |
Medium
|
Fix reported |
|
| Bit Form – Contact Form Plugin <= 2.21.6 - Missing Authorization to Unauthenticated Workflow ReplayCVE-2025-14901 |
bit-form |
WordPress |
Medium
|
Fix reported |
|
| Contact Form by Bit Form - Bit Form <= 2.20.3 - Unauthenticated Arbitrary File UploadCVE-2025-6679 |
bit-form |
WordPress |
Critical
|
Fix reported |
|
| Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.4 - Authenticater (Administrator+) Arbitrary File DeletionCVE-2024-7782 |
bit-form |
WordPress |
High
|
Fix reported |
|
| Contact Form by Bit Form <= 2.17.5 - Unauthenticated Sensitive Information ExposureCVE-2024-13451 |
bit-form |
WordPress |
Medium
|
Fix reported |
|
| Contact Form by Bit Form <= 2.18.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadCVE-2025-2580 |
bit-form |
WordPress |
Medium
|
Fix reported |
|
| Bit Form – Contact Form Plugin <= 2.18.0 - Open RedirectCVE-2025-30885 |
bit-form |
WordPress |
High
|
Fix reported |
|
| Contact Form by Bit Form <= 2.17.4 - Authenticated (Administrator+) Server-Side Request ForgeryCVE-2024-13450 |
bit-form |
WordPress |
Low
|
Fix reported |
|
| Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.17.3 - Missing Authorization to Authenticated (Subscriber+) Form Submission DisclosureCVE-2024-12190 |
bit-form |
WordPress |
Medium
|
Fix reported |
|
| Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.15.2 - Authenticated (Administrator+) Improper Input Validation via iconUpload Function to Arbitrary File ReadCVE-2024-9507 |
bit-form |
WordPress |
Medium
|
Fix reported |
|
| Bit Form – Contact Form Plugin <= 2.13.11 - Authenticated (Administrator+) SQL InjectionCVE-2024-47335 |
bit-form |
WordPress |
Medium
|
Fix reported |
|
| Bit Form – Contact Form Plugin <= 2.13.10 - Authenticated (Administrator+) Arbitrary File UploadCVE-2024-47319 |
bit-form |
WordPress |
High
|
Fix reported |
|
| Bit Form – Contact Form Plugin <= 2.13.10 - Unauthenticated Stored Cross-Site ScriptingCVE-2024-47301 |
bit-form |
WordPress |
High
|
Fix reported |
|
