WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bit-form
Published
2024-07-08
Title
Bit Form < 2.13.4 - Authenticated (Administrator+) Arbitrary File Upload
Slug
bit-form
Published
2024-08-19
Title
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary JavaScript File Uploads
Slug
bit-form
Published
2024-08-19
Title
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection via getLogHistory Function
Slug
bit-form
Published
2024-08-19
Title
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary File Read And Deletion
Slug
bit-form
Published
2024-08-19
Title
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection
Slug
bit-form
Published
2024-08-19
Title
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.4 - Authenticater (Administrator+) Arbitrary File Deletion
Slug
bit-form
Published
2024-09-24
Title
Bit Form – Contact Form Plugin < 2.13.11 - Unauthenticated Stored Cross-Site Scripting
Slug
bit-form
Published
2024-09-25
Title
Bit Form – Contact Form Plugin < 2.13.11 - Authenticated (Administrator+) Arbitrary File Upload
Slug
bit-form
Published
2024-09-26
Title
Bit Form – Contact Form Plugin < 2.13.12 - Authenticated (Administrator+) SQL Injection
Slug
bit-form
Published
2024-10-10
Title
Contact Form by Bit Form< 2.15.3 - Admin+ Arbitrary File Read
Slug
bit-form
Published
2024-12-24
Title
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder < 2.17.4 - Missing Authorization to Authenticated (Subscriber+) Form Submission Disclosure
Slug
bit-form
Published
2025-01-24
Title
Contact Form by Bit Form < 2.17.5 - Authenticated (Administrator+) Server-Side Request Forgery
Slug
bit-form
Published
2025-03-27
Title
Bit Form – Contact Form Plugin < 2.18.1 - Open Redirect
Slug
bit-form
Published
2025-04-24
Title
Contact Form by Bit Form < 2.18.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
bit-form
Published
2025-07-01
Title
Contact Form by Bit Form < 2.17.6 - Unauthenticated Sensitive Information Exposure
Slug
bit-form
Published
2025-08-14
Title
Contact Form by Bit Form - Bit Form < 2.20.4 - Unauthenticated Arbitrary File Upload
Slug
bit-form
Published
2026-01-06
Title
Bit Form – Contact Form Plugin < 2.21.7 - Missing Authorization to Unauthenticated Workflow Replay
Slug
bit-form
Published
2026-01-28
Title
Bit Form < 2.21.11 - Authenticated (Administrator+) SQL Injection
Slug
bit-form
Published
2026-06-30
Title
Bit Form < 3.1.0 - Unauthenticated Arbitrary File Read via Path Traversal
Slug
bit-form
Published
2026-06-30
Title
Bit Form < 3.1.0 - Unauthenticated Workflow Trigger via Authentication Bypass
Slug
bit-form
Published
2026-07-08
Title
Bit Form < 3.1.2 - Authenticated (Subscriber+) Arbitrary File Deletion via '_old' Parameter
Slug
bit-form
Published
2026-07-09
Title
Bit Form < 3.1.2 - Unauthenticated Inactive Form Submission
Slug
bit-form
Published
2026-07-17
Title
Bit Form < 3.1.4 - Admin+ Stored XSS via Conversational Form Progress Label
Slug
bit-form
Published
2026-07-27
Title
Bit Form < 3.2.0 - Unauthenticated Stored XSS via SVG Signature Upload
Slug
bit-form
Published
2026-08-13
Title
Bit Form < 3.2.1 - Authenticated (Administrator+) SQL Injection via 'filterText' Parameter