Skip to content
OpenAdvisories

Vendor

bitpressadmin

29 known vulnerabilities.

Products

Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder 9 Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 5 File Manager 4 Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation 4 Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist 3 Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder 2 Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress 1 Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-11989 Public exploit

    Bit integrations <= 2.8.7 - Unauthenticated Server-Side Request Forgery via Form Field Upload Mapping

    The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.8.7 via the upload_attachment. This makes it possible for una…

    bitpressadmin Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation Web / CMS
  • Medium 6.8
    CVE-2024-8743 Public exploit

    Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.7 - Authenticated (Subscriber+) Limited JavaScript File Upload

    The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to Limited JavaScript File Upload in all versions up to, and including, 6.5.7. This is due to a lack of proper checks on allowed file …

    bitpressadmin File Manager Web / CMS
  • High 8.1
    CVE-2024-7627 Public exploit

    Bit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race Condition

    The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'checkSyntax' function. This is due to writing a temporary file to a publicly accessible directory before performing file validation. This makes …

    bitpressadmin Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress Web / CMS