Bitapps - vulnerabilities (CVEs)
26 CVEs in 6 products, 0 in the last 30 days, newest from 2025-07-02.
Products
- Bit Form - 8 CVEs
- Contact Form Builder - 8 CVEs
- Bit Assist - 5 CVEs
- File Manager - 5 CVEs
- Bit Form Pro - 2 CVEs
- Bit Social - 0 CVEs
Newest CVEs of Bitapps
- CVE-2024-13451 - CVSS 7.5 (high), 2025-07-02: The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable…
- CVE-2025-0822 - CVSS 6.5 (medium), 2025-02-15: Bit Assist plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.2 via the fileID Parameter. This makes it possible…
- CVE-2025-0821 - CVSS 6.5 (medium), 2025-02-14: Bit Assist plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.5.2 due to…
- CVE-2024-13791 - CVSS 4.9 (medium), 2025-02-14: Bit Assist plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.2 via the downloadResponseFile() function. This…
- CVE-2024-13450 - CVSS 6.5 (medium), 2025-01-25: The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable…
- CVE-2024-47319 - CVSS 8 (high), 2024-10-05: Unrestricted Upload of File with Dangerous Type vulnerability in Bit Apps Bit Form bit-form.This issue affects Bit Form: from n/a through <= 2.13.10.
- CVE-2024-8743 - CVSS 6.8 (medium), 2024-10-05: The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to Limited JavaScript File Upload…
- CVE-2024-7770 - CVSS 8.8 (high), 2024-09-10: The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to…
- CVE-2024-7627 - CVSS 8.1 (high), 2024-09-05: The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'checkSyntax' function. This is due to…
- CVE-2024-43251 - CVSS 6.5 (medium), 2024-08-26: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Bit Apps Bit Form Pro.This issue affects Bit Form Pro: from n/a through 2.6.4.
- CVE-2024-7782 - CVSS 8.7 (high), 2024-08-20: The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable…
- CVE-2024-7775 - CVSS 5.5 (medium), 2024-08-20: The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable…
- CVE-2024-7780 - CVSS 7.2 (high), 2024-08-20: The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable…
- CVE-2024-7777 - CVSS 9 (critical), 2024-08-20: The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable…
- CVE-2024-7702 - CVSS 7.2 (high), 2024-08-20: The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable…
- CVE-2024-43250 - CVSS 7.1 (high), 2024-08-19: Incorrect Authorization vulnerability in Bit Apps Bit Form Pro bitformpro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects…
- CVE-2024-43249 - CVSS 9.9 (critical), 2024-08-19: Unrestricted Upload of File with Dangerous Type vulnerability in Bit Apps Bit Form Pro allows Command Injection.This issue affects Bit Form Pro: from n/a…
- CVE-2024-43248 - CVSS 9.1 (critical), 2024-08-19: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bit Apps Bit Form Pro allows File Manipulation.This issue…
- CVE-2024-6123 - CVSS 7.2 (high), 2024-07-09: The Bit Form plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'iconUpload' function in all versions up…
- CVE-2024-1640 - CVSS 5.3 (medium), 2024-03-13: The Contact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form plugin for WordPress is vulnerable to…
- CVE-2023-51371 - CVSS 5.9 (medium), 2023-12-29: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bit Assist Chat Widget: WhatsApp Chat, Facebook…
- CVE-2022-47599 - CVSS 7.2 (high), 2023-12-20: Deserialization of Untrusted Data vulnerability in File Manager by Bit Form Team File Manager – 100% Free & Open Source File Manager Plugin for WordPress |…
- CVE-2023-5907 - CVSS 6.5 (medium), 2023-12-11: The File Manager WordPress plugin before 6.3 does not restrict the file managers root directory, allowing an administrator to set a root outside of the…
- CVE-2023-3667 - CVSS 4.8 (medium), 2023-08-21: The Bit Assist WordPress plugin before 1.1.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to…
- CVE-2023-3645 - CVSS 4.8 (medium), 2023-08-14: The Contact Form Builder by Bit Form WordPress plugin before 2.2.0 does not sanitise and escape some of its settings, which could allow high privilege users…
- CVE-2022-4774 - CVSS 9.8 (critical), 2023-05-15: The Bit Form WordPress plugin before 1.9 does not validate the file types uploaded via it's file upload form field, allowing unauthenticated users to upload…
