WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bit-assist
Published
2023-07-27
Title
Bit Assist < 1.1.9 - Admin+ Stored Cross-Site Scripting
Slug
bit-assist
Published
2023-09-18
Title
Bit Assist < 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
bit-assist
Published
2025-02-13
Title
Bit Assist < 1.5.3 - Authenticated (Subscriber+) SQL Injection via id Parameter
Slug
bit-assist
Published
2025-02-13
Title
Bit Assist < 1.5.3 - Admin+ Arbitrary File Read
Slug
bit-assist
Published
2025-02-14
Title
Bit Assist < 1.5.3 - Subscriber+ Arbitrary File Read via fileID Parameter
Slug
bit-assist
Published
2025-03-28
Title
Bit Assist < 1.5.5 - Unauthenticated Path Traversal
Slug
bit-assist
Published
2025-12-19
Title
Bit Assist < 1.6.0 - Missing Authorization
Slug
bit-form
Published
2023-04-19
Title
Bit Form < 1.9 - RCE via Unauthenticated Arbitrary File Upload
Slug
bit-form
Published
2023-07-24
Title
Contact Form Builder by Bit Form < 2.2.0 - Admin+ Stored XSS
Slug
bit-form
Published
2024-03-13
Title
Contact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form < 2.10.2 - Unauthenticated Insecure Direct Object Reference to Form Submission Alteration
Slug
bit-form
Published
2024-07-08
Title
Bit Form < 2.13.4 - Authenticated (Administrator+) Arbitrary File Upload
Slug
bit-form
Published
2024-08-19
Title
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary JavaScript File Uploads
Slug
bit-form
Published
2024-08-19
Title
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection via getLogHistory Function
Slug
bit-form
Published
2024-08-19
Title
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary File Read And Deletion
Slug
bit-form
Published
2024-08-19
Title
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection
Slug
bit-form
Published
2024-08-19
Title
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.4 - Authenticater (Administrator+) Arbitrary File Deletion
Slug
bit-form
Published
2024-09-24
Title
Bit Form – Contact Form Plugin < 2.13.11 - Unauthenticated Stored Cross-Site Scripting
Slug
bit-form
Published
2024-09-25
Title
Bit Form – Contact Form Plugin < 2.13.11 - Authenticated (Administrator+) Arbitrary File Upload
Slug
bit-form
Published
2024-09-26
Title
Bit Form – Contact Form Plugin < 2.13.12 - Authenticated (Administrator+) SQL Injection
Slug
bit-form
Published
2024-10-10
Title
Contact Form by Bit Form< 2.15.3 - Admin+ Arbitrary File Read
Slug
bit-form
Published
2024-12-24
Title
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder < 2.17.4 - Missing Authorization to Authenticated (Subscriber+) Form Submission Disclosure
Slug
bit-form
Published
2025-01-24
Title
Contact Form by Bit Form < 2.17.5 - Authenticated (Administrator+) Server-Side Request Forgery
Slug
bit-form
Published
2025-03-27
Title
Bit Form – Contact Form Plugin < 2.18.1 - Open Redirect
Slug
bit-form
Published
2025-04-24
Title
Contact Form by Bit Form < 2.18.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
bit-form
Published
2025-07-01
Title
Contact Form by Bit Form < 2.17.6 - Unauthenticated Sensitive Information Exposure