Bit Form (Unknown) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-08-05. Vendor: Unknown.

CVEs of Bit Form

• CVE-2026-16573 - CVSS 7.5 (high), 2026-08-05: The Bit Form WordPress plugin before 3.2.0 does not sanitize an uploaded signature image before storing it, allowing unauthenticated attackers to upload a…
• CVE-2025-15669 - CVSS 4.8 (medium), 2026-08-01: The Bit Form WordPress plugin before 3.1.4 does not sanitise one of its conversational-form display settings before rendering it on the public-facing form,…
• CVE-2026-15054 - CVSS 3.7 (low), 2026-07-30: The Bit Form WordPress plugin before 3.1.2 does not enforce a form's active/published status on its public form-submission handlers, allowing unauthenticated…
• CVE-2026-13693 - CVSS 5.9 (medium), 2026-07-21: The Bit Form WordPress plugin before 3.1.0 does not restrict a form file-field value to a safe path before reading the file and attaching it to a notification…
• CVE-2026-13694 - CVSS 6.5 (medium), 2026-07-21: The Bit Form WordPress plugin before 3.1.0 does not properly validate its workflow-trigger token once the associated transient has expired, allowing…
• CVE-2022-4774 - CVSS 9.8 (critical), 2023-05-15: The Bit Form WordPress plugin before 1.9 does not validate the file types uploaded via it's file upload form field, allowing unauthenticated users to upload…