BI
Vendor
Bitapps
23
CVEs
0
On KEV
0
New 30D
Products
CF9.0
Contact Form Builder
Bitapps
8 CVEs0 on KEV0 new
BF9.8
Bit Form
Bitapps
6 CVEs0 on KEV0 new
BA6.5
Bit Assist
Bitapps
5 CVEs0 on KEV0 new
FM8.8
File Manager
Bitapps
4 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-13451 | BF Bit Form Bitapps | 7.5 | Jul 2 | The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to Sensitive… |
| CVE-2025-0822 | BA Bit Assist Bitapps | 6.5 | Feb 15 | Bit Assist plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.2 via the fileID Parameter |
| CVE-2025-0821 | BA Bit Assist Bitapps | 6.5 | Feb 14 | Bit Assist plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.5.2 due to insufficient escaping on the… |
| CVE-2024-13791 | BA Bit Assist Bitapps | 4.9 | Feb 14 | Bit Assist plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.2 via the downloadResponseFile() function |
| CVE-2024-13450 | CF Contact Form Builder Bitapps | 6.5 | Jan 25 | The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to Server-Side… |
| CVE-2024-7770 | FM File Manager Bitapps | 8.8 | Sep 10 | Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.5 - Authenticated (Subscriber+) Arbitrary File Upload |
| CVE-2024-7627 | FM File Manager Bitapps | 8.1 | Sep 5 | Bit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race Condition |
| CVE-2024-43251 | BF Bit Form Bitapps | 6.5 | Aug 26 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Bit Apps Bit Form Pro.This issue affects Bit Form Pro: from n/a through 2.6.4 |
| CVE-2024-7782 | CF Contact Form Builder Bitapps | 6.5 | Aug 20 | The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to arbitrary file… |
| CVE-2024-7780 | CF Contact Form Builder Bitapps | 7.2 | Aug 20 | The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to generic SQL… |
| CVE-2024-7777 | CF Contact Form Builder Bitapps | 9.0 | Aug 20 | The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to arbitrary file… |
| CVE-2024-7775 | CF Contact Form Builder Bitapps | 4.8 | Aug 20 | The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to arbitrary… |
| CVE-2024-7702 | CF Contact Form Builder Bitapps | 7.2 | Aug 20 | The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to generic SQL… |
| CVE-2024-43250 | BF Bit Form Bitapps | 6.5 | Aug 19 | Incorrect Authorization vulnerability in Bit Apps Bit Form Pro bitformpro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bit Form Pro: from n/a… |
| CVE-2024-43249 | BF Bit Form Bitapps | 8.8 | Aug 19 | Unrestricted Upload of File with Dangerous Type vulnerability in Bit Apps Bit Form Pro allows Command Injection.This issue affects Bit Form Pro: from n/a through 2.6.4 |
| CVE-2024-43248 | BF Bit Form Bitapps | 9.1 | Aug 19 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bit Apps Bit Form Pro allows File Manipulation.This issue affects Bit Form Pro:… |
| CVE-2024-1640 | CF Contact Form Builder Bitapps | 5.3 | Mar 13 | The Contact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form plugin for WordPress is vulnerable to unauthorized modification of… |
| CVE-2023-51371 | BA Bit Assist Bitapps | 4.8 | Dec 29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bit Assist Chat Widget: WhatsApp Chat, Facebook Messenger Chat, Telegram Chat… |
| CVE-2022-47599 | FM File Manager Bitapps | 7.2 | Dec 20 | Deserialization of Untrusted Data vulnerability in File Manager by Bit Form Team File Manager – 100% Free & Open Source File Manager Plugin for WordPress | Bit File Manager.This… |
| CVE-2023-5907 | FM File Manager Bitapps | 6.5 | Dec 11 | The File Manager WordPress plugin before 6.3 does not restrict the file managers root directory, allowing an administrator to set a root outside of the WordPress root directory,… |
| CVE-2023-3667 | BA Bit Assist Bitapps | 4.8 | Aug 21 | The Bit Assist WordPress plugin before 1.1.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site… |
| CVE-2023-3645 | CF Contact Form Builder Bitapps | 4.8 | Aug 14 | The Contact Form Builder by Bit Form WordPress plugin before 2.2.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to… |
| CVE-2022-4774 | BF Bit Form Bitapps | 9.8 | May 15 | The Bit Form WordPress plugin before 1.9 does not validate the file types uploaded via it's file upload form field, allowing unauthenticated users to upload arbitrary files types… |