Log in Start free

bitpressadmin

Products

ProductCVEsExploitedLatest
Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder9–Jan 7, 2026
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder5–Aug 20, 2024
File Manager4–Aug 6, 2026
Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation4–Oct 14, 2026
Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist3–Feb 15, 2025
Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder2–Aug 14, 2026
Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress1–Sep 5, 2024
Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More1–Oct 28, 2026

Exploited and recent CVEs

  • CVE-2026-110185 Medium 5.9 Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More <= 1.31.0 - Unauthenticated Local File Inclusion via 'webhook' and 'body' Parameters 0.6%
  • CVE-2026-104749 High 7.5 Bit integrations <= 2.10.6 - Unauthenticated Privilege Escalation via Identity-Confused Log Re-execution to Account Takeover via Log Re-execution of Anonymous-Captured Field Data 0.5%
  • CVE-2026-102007 High 7.2 Bit integrations <= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via 'notification_content' Field via Public Bit Assist Webhook Callback 0.2%
  • CVE-2026-16810 Medium 6.5 Bit Form <= 3.2.0 - Authenticated (Administrator+) SQL Injection via 'filterText' Parameter 0.5%
  • CVE-2026-15991 High 8.8 File Manager 6.0 - 6.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read and Deletion via 'cmd' Query Parameter 1.1%
  • CVE-2026-15006 High 7.5 Bit integrations <= 2.9.0 - Unauthenticated Arbitrary File Read via Optional CF7 File Field 1.2%
  • CVE-2026-14372 High 7.1 Bit Form <= 3.1.1 - Authenticated (Subscriber+) Arbitrary File Deletion via '_old' Parameter 1.1%
  • CVE-2026-11989 Medium 6.5 Bit integrations <= 2.8.7 - Unauthenticated Server-Side Request Forgery via Form Field Upload Mapping 0.5%
  • CVE-2025-14901 Medium 6.5 Bit Form – Contact Form Plugin <= 2.21.6 - Missing Authorization to Unauthenticated Workflow Replay 0.4%
  • CVE-2025-6679 Critical 9.8 Contact Form by Bit Form - Bit Form <= 2.20.3 - Unauthenticated Arbitrary File Upload 0.9%
  • CVE-2024-13451 Medium 5.3 Contact Form by Bit Form <= 2.17.5 - Unauthenticated Sensitive Information Exposure 0.4%
  • CVE-2025-1725 Medium 6.4 Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Uploads 0.2%
  • CVE-2025-2580 Medium 4.9 Contact Form by Bit Form <= 2.18.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.3%
  • CVE-2025-0822 Medium 6.5 Bit Assist <= 1.5.2 - Path Traversal to Authenticated (Subscriber+) Arbitrary File Read via fileID Parameter 0.6%
  • CVE-2025-0821 Medium 6.5 Bit Assist <= 1.5.2 - Authenticated (Subscriber+) SQL Injection via id Parameter 0.6%
  • CVE-2024-13791 Medium 4.9 Bit Assist <= 1.5.2 - Path Traversal to Authenticated (Administrator+) Arbitrary File Read via downloadResponseFile Function 0.7%
  • CVE-2024-13450 Low 3.8 Contact Form by Bit Form <= 2.17.4 - Authenticated (Administrator+) Server-Side Request Forgery 0.4%
  • CVE-2024-12190 Medium 4.3 Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.17.3 - Missing Authorization to Authenticated (Subscriber+) Form Submission Disclosure 0.5%
  • CVE-2024-9507 Medium 4.9 Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.15.2 - Authenticated (Administrator+) Improper Input Validation via iconUpload Function to Arbitrary File Read 0.5%
  • CVE-2024-8743 Medium 6.8 Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.7 - Authenticated (Subscriber+) Limited JavaScript File Upload 0.8%
  • CVE-2024-7770 High 8.8 Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.5 - Authenticated (Subscriber+) Arbitrary File Upload 1.1%
  • CVE-2024-7627 High 8.1 Bit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race Condition 2.8%
  • CVE-2024-7782 High 8.7 Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.4 - Authenticater (Administrator+) Arbitrary File Deletion 0.9%
  • CVE-2024-7780 High 7.2 Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection 0.5%
  • CVE-2024-7777 Critical 9.0 Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary File Read And Deletion 1.0%
  • CVE-2024-7775 Medium 5.5 Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary JavaScript File Uploads 0.3%
  • CVE-2024-7702 High 7.2 Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection via getLogHistory Function 0.5%
  • CVE-2024-6123 High 7.2 Bit Form <= 2.13.3 - Authenticated (Administrator+) Arbitrary File Upload 1.0%
  • CVE-2024-1640 Medium 5.3 Contact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form <= 2.10.1 - Unauthenticated Insecure Direct Object Reference to Form Submission Alteration 0.5%