bitpressadmin Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder

• CVE-2025-14901 Medium 6.5 Bit Form – Contact Form Plugin <= 2.21.6 - Missing Authorization to Unauthenticated Workflow Replay 0.4%
• CVE-2025-6679 Critical 9.8 Contact Form by Bit Form - Bit Form <= 2.20.3 - Unauthenticated Arbitrary File Upload 0.9%
• CVE-2024-13451 Medium 5.3 Contact Form by Bit Form <= 2.17.5 - Unauthenticated Sensitive Information Exposure 0.4%
• CVE-2025-2580 Medium 4.9 Contact Form by Bit Form <= 2.18.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.3%
• CVE-2024-13450 Low 3.8 Contact Form by Bit Form <= 2.17.4 - Authenticated (Administrator+) Server-Side Request Forgery 0.4%
• CVE-2024-12190 Medium 4.3 Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.17.3 - Missing Authorization to Authenticated (Subscriber+) Form Submission Disclosure 0.5%
• CVE-2024-9507 Medium 4.9 Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.15.2 - Authenticated (Administrator+) Improper Input Validation via iconUpload Function to Arbitrary File Read 0.5%
• CVE-2024-6123 High 7.2 Bit Form <= 2.13.3 - Authenticated (Administrator+) Arbitrary File Upload 1.0%
• CVE-2024-1640 Medium 5.3 Contact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form <= 2.10.1 - Unauthenticated Insecure Direct Object Reference to Form Submission Alteration 0.5%