Log in Start free

Bit Apps

Products

ProductCVEsExploitedLatest
Bit Form5–Feb 19, 2026
Bit Form Pro4–Aug 26, 2024
Bit Assist2–Dec 24, 2025
Bit Integrations1–Mar 27, 2025
Bit SMTP1–Mar 25, 2026

Exploited and recent CVEs

  • CVE-2026-32519 Critical 9.0 WordPress Bit SMTP plugin <= 1.2.2 - Broken Authentication vulnerability 0.4%
  • CVE-2026-25418 High 7.6 WordPress Bit Form plugin <= 2.21.10 - SQL Injection vulnerability 0.3%
  • CVE-2025-68596 Medium 5.3 WordPress Bit Assist plugin <= 1.5.11 - Broken Access Control vulnerability 0.3%
  • CVE-2025-30834 High 7.5 WordPress Bit Assist plugin <= 1.5.4 - Path Traversal vulnerability 0.6%
  • CVE-2025-30885 Medium 4.7 WordPress Bit Form plugin <= 2.18.0 - Open Redirection vulnerability 0.4%
  • CVE-2025-30884 Medium 4.7 WordPress Bit Integrations plugin <= 2.4.10 - Open Redirection vulnerability 0.4%
  • CVE-2024-47335 High 7.6 WordPress Bit Form plugin <= 2.13.11 - SQL Injection vulnerability 0.4%
  • CVE-2024-47301 High 7.1 WordPress Bit Form plugin <= 2.13.10 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-47319 High 8.0 WordPress Bit Form plugin <= 2.13.10 - Arbitrary File Upload vulnerability 0.4%
  • CVE-2024-43251 Medium 6.5 WordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Sensitive Data Exposure vulnerability 0.4%
  • CVE-2024-43250 High 7.1 WordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Plugin Settings Change vulnerability 0.3%
  • CVE-2024-43249 Critical 9.9 WordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Arbitrary File Upload vulnerability 1.0%
  • CVE-2024-43248 High 8.6 WordPress Bit Form Pro plugin <= 2.6.4 - Unauthenticated Arbitrary File Deletion vulnerability 0.6%