Multi Step (Bitpressadmin) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-01-07. Vendor: Bitpressadmin.
CVEs of Multi Step
- CVE-2025-14901 - CVSS 6.5 (medium), 2026-01-07: The Bit Form – Contact Form Plugin plugin for WordPress is vulnerable to unauthorized workflow execution due to missing authorization in the triggerWorkFlow…
- CVE-2025-6679 - CVSS 9.8 (critical), 2025-08-15: The Bit Form builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including,…
- CVE-2024-13451 - CVSS 7.5 (high), 2025-07-02: The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable…
- CVE-2025-2580 - CVSS 4.9 (medium), 2025-04-25: The Contact Form by Bit Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including,…
- CVE-2024-13450 - CVSS 6.5 (medium), 2025-01-25: The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable…
- CVE-2024-12190 - CVSS 4.3 (medium), 2024-12-25: The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable…
- CVE-2024-9507 - CVSS 4.9 (medium), 2024-10-11: The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable…
- CVE-2024-6123 - CVSS 7.2 (high), 2024-07-09: The Bit Form plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'iconUpload' function in all versions up…
- CVE-2024-1640 - CVSS 5.3 (medium), 2024-03-13: The Contact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form plugin for WordPress is vulnerable to…
