What’s Vulnerable › Products

bitpressadmin Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your bitpressadmin Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder version is affected

Latest bitpressadmin Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder vulnerabilities

• CVE-2025-14901 — Bit Form – Contact Form Plugin <= 2.21.6 - Missing Authorization to Unauthenticated Workflow Replay (CVSS 6.5)
• CVE-2025-6679 — Contact Form by Bit Form - Bit Form <= 2.20.3 - Unauthenticated Arbitrary File Upload (CVSS 9.8)
• CVE-2025-2580 — Contact Form by Bit Form <= 2.18.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload (CVSS 4.9)
• CVE-2024-13450 — Contact Form by Bit Form <= 2.17.4 - Authenticated (Administrator+) Server-Side Request Forgery (CVSS 6.5)
• CVE-2024-12190 — Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.17.3 - Missing Authorization to Authenticated (Subscriber+) Form Submission Disclosure (CVSS 4.3)
• CVE-2024-9507 — Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.15.2 - Authenticated (Administrator+) Improper Input Validation via iconUpload Function to Arbitrary File Read (CVSS 4.9)
• CVE-2024-7782 — Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.4 - Authenticater (Administrator+) Arbitrary File Deletion (CVSS 6.5)
• CVE-2024-7780 — Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection (CVSS 7.2)
• CVE-2024-7777 — Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary File Read And Deletion (CVSS 9.0)
• CVE-2024-7775 — Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary JavaScript File Uploads (CVSS 4.8)
• CVE-2024-7702 — Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection via getLogHistory Function (CVSS 7.2)
• CVE-2024-1640 — Contact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form <= 2.10.1 - Unauthenticated Insecure Direct Object Reference to Form Submission Alteration (CVSS 5.3)
• CVE-2023-3645 — Contact Form Builder by Bit Form < 2.2.0 - Admin+ Stored XSS (CVSS 4.8)