What’s Vulnerable › Products
Bit Form vulnerabilities
17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.
Check whether your Bit Form version is affected
Latest Bit Form vulnerabilities
- CVE-2026-16573 — Bit Form < 3.2.0 - Unauthenticated Stored XSS via SVG Signature Upload (CVSS 7.5)
- CVE-2025-15669 — Bit Form < 3.1.4 - Admin+ Stored XSS via Conversational Form Progress Label (CVSS 4.8)
- CVE-2026-15054 — Bit Form < 3.1.2 - Unauthenticated Inactive Form Submission (CVSS 3.7)
- CVE-2026-13694 — Bit Form < 3.1.0 - Unauthenticated Workflow Trigger via Authentication Bypass (CVSS 6.5)
- CVE-2026-13693 — Bit Form < 3.1.0 - Unauthenticated Arbitrary File Read via Path Traversal (CVSS 5.9)
- CVE-2026-25418 — WordPress Bit Form plugin <= 2.21.10 - SQL Injection vulnerability (CVSS 7.6)
- CVE-2024-13451 — Contact Form by Bit Form <= 2.17.5 - Unauthenticated Sensitive Information Exposure (CVSS 7.5)
- CVE-2025-30885 — WordPress Bit Form plugin <= 2.18.0 - Open Redirection vulnerability (CVSS 4.7)
- CVE-2024-47335 — WordPress Bit Form plugin <= 2.13.11 - SQL Injection vulnerability (CVSS 7.6)
- CVE-2024-47301 — WordPress Bit Form plugin <= 2.13.10 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2024-47319 — WordPress Bit Form plugin <= 2.13.10 - Arbitrary File Upload vulnerability (CVSS 8.0)
- CVE-2024-43251 — WordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Sensitive Data Exposure vulnerability (CVSS 6.5)
- CVE-2024-43250 — WordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Plugin Settings Change vulnerability (CVSS 6.5)
- CVE-2024-43249 — WordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Arbitrary File Upload vulnerability (CVSS 8.8)
- CVE-2024-43248 — WordPress Bit Form Pro plugin <= 2.6.4 - Unauthenticated Arbitrary File Deletion vulnerability (CVSS 9.1)
- CVE-2024-6123 — Bit Form <= 2.13.3 - Authenticated (Administrator+) Arbitrary File Upload (CVSS 7.2)
- CVE-2022-4774 — Bit Form < 1.9 - RCE via Unauthenticated Arbitrary File Upload (CVSS 9.8)