Skip to content
Noroxi

Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder

bit-form · plugin

Known security vulnerabilities for Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder. Find out in seconds which version runs on your site with WP Lens.

21 known vulnerabilities

2 critical · latest Aug 14, 2026

Vulnerabilities

  • CVE-2025-6679

    Contact Form by Bit Form - Bit Form <= 2.20.3 - Unauthenticated Arbitrary File Upload

    Critical 9.8

  • CVE-2024-7777

    Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administra

    Critical 9.0

  • CVE-2024-47319

    WordPress Bit Form plugin <= 2.13.10 - Arbitrary File Upload vulnerability

    High 8.0

  • CVE-2026-25418

    WordPress Bit Form plugin <= 2.21.10 - SQL Injection vulnerability

    High 7.6

  • CVE-2024-47335

    WordPress Bit Form plugin <= 2.13.11 - SQL Injection vulnerability

    High 7.6

  • CVE-2024-13451

    Contact Form by Bit Form <= 2.17.5 - Unauthenticated Sensitive Information Exposure

    High 7.5

  • CVE-2024-7780

    Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administra

    High 7.2

  • CVE-2024-7702

    Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administra

    High 7.2

  • CVE-2024-6123

    Bit Form <= 2.13.3 - Authenticated (Administrator+) Arbitrary File Upload

    High 7.2

  • CVE-2026-14372

    Bit Form <= 3.1.1 - Authenticated (Subscriber+) Arbitrary File Deletion via '_old' Parameter

    High 7.1

  • CVE-2024-47301

    WordPress Bit Form plugin <= 2.13.10 - Cross Site Scripting (XSS) vulnerability

    High 7.1

  • CVE-2026-16810

    Bit Form <= 3.2.0 - Authenticated (Administrator+) SQL Injection via 'filterText' Parameter

    Medium 6.5

  • CVE-2025-14901

    Bit Form – Contact Form Plugin <= 2.21.6 - Missing Authorization to Unauthenticated Workflow Replay

    Medium 6.5

  • CVE-2024-13450

    Contact Form by Bit Form <= 2.17.4 - Authenticated (Administrator+) Server-Side Request Forgery

    Medium 6.5

  • CVE-2024-7782

    Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.4 - Authenticater (Administra

    Medium 6.5

  • CVE-2024-1640

    Contact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form <= 2.10.1 - Unauthenticated Insecure Direct Object Re

    Medium 5.3

  • CVE-2025-2580

    Contact Form by Bit Form <= 2.18.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

    Medium 4.9

  • CVE-2024-9507

    Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.15.2 - Authenticated (Administrator

    Medium 4.9

  • CVE-2024-7775

    Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administra

    Medium 4.8

  • CVE-2025-30885

    WordPress Bit Form plugin <= 2.18.0 - Open Redirection vulnerability

    Medium 4.7

  • CVE-2024-12190

    Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.17.3 - Missing Authorization to Au

    Medium 4.3

← Back to directory