Login Request a demo
BF
Product
Bit Form
by Bitapps · last CVE Jul 2, 2025
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 2High 2Medium 2Low 0
Severity
All severities6Critical2High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Bit Form to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-4774
9.8
2%
May 15
The Bit Form WordPress plugin before 1.9 does not validate the file types uploaded via it's file upload form field, allowing unauthenticated users to upload arbitrary files types…
Affected: before 1.9
CVE-2024-43248
9.1
1%
Aug 19
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bit Apps Bit Form Pro allows File Manipulation.This issue affects Bit Form Pro:…
Affected: through 2.6.4
CVE-2024-43249
8.8
1%
Aug 19
Unrestricted Upload of File with Dangerous Type vulnerability in Bit Apps Bit Form Pro allows Command Injection.This issue affects Bit Form Pro: from n/a through 2.6.4
Affected: through 2.6.4
CVE-2024-13451
7.5
0%
Jul 2
Contact Form by Bit Form <= 2.17.5 - Unauthenticated Sensitive Information Exposure
Affected: before 2.17.6
CVE-2024-43251
6.5
0%
Aug 26
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Bit Apps Bit Form Pro.This issue affects Bit Form Pro: from n/a through 2.6.4
Affected: through 2.6.4
CVE-2024-43250
6.5
0%
Aug 19
Incorrect Authorization vulnerability in Bit Apps Bit Form Pro bitformpro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bit Form Pro: from n/a…
Affected: through 2.6.4
Showing 6