Skip to content
OpenAdvisories

Vendor

Bit Apps

13 known vulnerabilities.

Products

Bit Form 5 Bit Form Pro 4 Bit Assist 2 Bit Integrations 1 Bit SMTP 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.6
    CVE-2026-25418

    WordPress Bit Form plugin <= 2.21.10 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bit Apps Bit Form bit-form allows SQL Injection.This issue affects Bit Form: from n/a through <= 2.21.10.

    Bit Apps Bit Form
  • High 7.5
    CVE-2025-30834

    WordPress Bit Assist plugin <= 1.5.4 - Path Traversal vulnerability

    Path Traversal: '.../...//' vulnerability in Bit Apps Bit Assist bit-assist allows Path Traversal.This issue affects Bit Assist: from n/a through <= 1.5.4.

    Bit Apps Bit Assist
  • High 7.6
    CVE-2024-47335

    WordPress Bit Form plugin <= 2.13.11 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bit Apps Bit Form bit-form allows SQL Injection.This issue affects Bit Form: from n/a through <= 2.13.11.

    Bit Apps Bit Form
  • High 7.1
    CVE-2024-47301

    WordPress Bit Form plugin <= 2.13.10 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bit Apps Bit Form bit-form allows Stored XSS.This issue affects Bit Form: from n/a through <= 2.13.10.

    Bit Apps Bit Form
  • High 8.0
    CVE-2024-47319

    WordPress Bit Form plugin <= 2.13.10 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Bit Apps Bit Form bit-form.This issue affects Bit Form: from n/a through <= 2.13.10.

    Bit Apps Bit Form
  • High 7.1
    CVE-2024-43250

    WordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Plugin Settings Change vulnerability

    Incorrect Authorization vulnerability in Bit Apps Bit Form Pro bitformpro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bit Form Pro: from n/a through 2.6.4.

    Bit Apps Bit Form Pro
  • High 8.6
    CVE-2024-43248

    WordPress Bit Form Pro plugin <= 2.6.4 - Unauthenticated Arbitrary File Deletion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bit Apps Bit Form Pro allows File Manipulation.This issue affects Bit Form Pro: from n/a through 2.6.4.

    Bit Apps Bit Form Pro