Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder

Уязвимости

• CVE-2025-6679

  Contact Form by Bit Form - Bit Form <= 2.20.3 - Unauthenticated Arbitrary File Upload

  Критич. 9.8

• CVE-2024-7777

  Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administra

  Критич. 9.0

• CVE-2024-47319

  WordPress Bit Form plugin <= 2.13.10 - Arbitrary File Upload vulnerability

  Высокий 8.0

• CVE-2026-25418

  WordPress Bit Form plugin <= 2.21.10 - SQL Injection vulnerability

  Высокий 7.6

• CVE-2024-47335

  WordPress Bit Form plugin <= 2.13.11 - SQL Injection vulnerability

  Высокий 7.6

• CVE-2024-13451

  Contact Form by Bit Form <= 2.17.5 - Unauthenticated Sensitive Information Exposure

  Высокий 7.5

• CVE-2024-7780

  Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administra

  Высокий 7.2

• CVE-2024-7702

  Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administra

  Высокий 7.2

• CVE-2024-6123

  Bit Form <= 2.13.3 - Authenticated (Administrator+) Arbitrary File Upload

  Высокий 7.2

• CVE-2026-14372

  Bit Form <= 3.1.1 - Authenticated (Subscriber+) Arbitrary File Deletion via '_old' Parameter

  Высокий 7.1

• CVE-2024-47301

  WordPress Bit Form plugin <= 2.13.10 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-16810

  Bit Form <= 3.2.0 - Authenticated (Administrator+) SQL Injection via 'filterText' Parameter

  Средний 6.5

• CVE-2025-14901

  Bit Form – Contact Form Plugin <= 2.21.6 - Missing Authorization to Unauthenticated Workflow Replay

  Средний 6.5

• CVE-2024-13450

  Contact Form by Bit Form <= 2.17.4 - Authenticated (Administrator+) Server-Side Request Forgery

  Средний 6.5

• CVE-2024-7782

  Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.4 - Authenticater (Administra

  Средний 6.5

• CVE-2024-1640

  Contact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form <= 2.10.1 - Unauthenticated Insecure Direct Object Re

  Средний 5.3

• CVE-2025-2580

  Contact Form by Bit Form <= 2.18.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

  Средний 4.9

• CVE-2024-9507

  Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.15.2 - Authenticated (Administrator

  Средний 4.9

• CVE-2024-7775

  Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administra

  Средний 4.8

• CVE-2025-30885

  WordPress Bit Form plugin <= 2.18.0 - Open Redirection vulnerability

  Средний 4.7

• CVE-2024-12190

  Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.17.3 - Missing Authorization to Au

  Средний 4.3