Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder vulnerabilities

Product

Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder

by bitpressadmin · last CVE Jan 7, 2026

CVEs

On KEV

6.5

Max CVSS

New 30D

Vulnerabilities2 In the news0 Timeline

Severity mix

Critical 0High 0Medium 2Low 0

Severity

All severities2 Critical0 High0 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-14901	6.5	0%	Jan 7	Bit Form – Contact Form Plugin <= 2.21.6 - Missing Authorization to Unauthenticated Workflow Replay Affected: through 2.21.6
CVE-2024-12190	4.3	0%	Dec 25	Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.17.3 - Missing Authorization to Authenticated (Subscriber+) Form Submission Disclosure Affected: through 2.17.3