Plugin icon

Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation

bit-integrations

Vulnerabilities:

5

Last Updated:

October 12, 2026

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2026-10-13
Title
Bit integrations < 2.10.7 - Unauthenticated Privilege Escalation via Identity-Confused Log Re-execution to Account Takeover via Log Re-execution of Anonymous-Captured Field Data
Fixed in
Fixed in 2.10.7
CVSS
7.5 (high)
Published
2026-10-12
Title
Bit integrations < 2.10.7 - Unauthenticated Stored Cross-Site Scripting via 'notification_content' Field via Public Bit Assist Webhook Callback
Fixed in
Fixed in 2.10.7
CVSS
7.2 (high)
Published
2026-07-31
Title
Bit integrations < 2.9.1 - Unauthenticated Arbitrary File Read via Optional CF7 File Field
Fixed in
Fixed in 2.9.1
CVSS
7.5 (high)
Published
2026-06-18
Title
Bit integrations < 2.8.8 - Unauthenticated Server-Side Request Forgery via Form Field Upload Mapping
Fixed in
Fixed in 2.8.8
CVSS
6.5 (medium)
Published
2025-03-27
Title
Bit Integrations < 2.5.0 - Open Redirect
Fixed in
Fixed in 2.5.0
CVSS
7.2 (high)