Skip to content

Bitpressadmin vulnerabilities

Products

Newest

bitpressadmin bit flows: ai agent automation & integrations for forms, crm, ecommerce, google sheets, and more Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More <= 1.31.0 - Unauthenticated Local File Inclusion via 'webhook' and 'body' Parameters CVE-2026-110185 5.9 MediumOctober 28, 2026
bitpressadmin bit integrations – form integration, webhook, spreadsheets, crm, lms & email automation Bit integrations <= 2.10.6 - Unauthenticated Privilege Escalation via Identity-Confused Log Re-execution to Account Takeover via Log Re-execution of Anonymous-Captured Field Data CVE-2026-104749 7.5 HighOctober 14, 2026
bitpressadmin bit integrations – form integration, webhook, spreadsheets, crm, lms & email automation Bit integrations <= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via 'notification_content' Field via Public Bit Assist Webhook Callback CVE-2026-102007 7.2 HighOctober 13, 2026
bitpressadmin bit form – contact form, payment forms, multi step forms, calculator & custom form builder Bit Form <= 3.2.0 - Authenticated (Administrator+) SQL Injection via 'filterText' Parameter CVE-2026-16810 6.5 MediumAugust 14, 2026
bitpressadmin file manager File Manager 6.0 - 6.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read and Deletion via 'cmd' Query Parameter CVE-2026-15991 8.8 HighAugust 6, 2026
bitpressadmin bit integrations – form integration, webhook, spreadsheets, crm, lms & email automation Bit integrations <= 2.9.0 - Unauthenticated Arbitrary File Read via Optional CF7 File Field CVE-2026-15006 7.5 HighAugust 1, 2026
bitpressadmin bit form – contact form, payment forms, multi step forms, calculator & custom form builder Bit Form <= 3.1.1 - Authenticated (Subscriber+) Arbitrary File Deletion via '_old' Parameter CVE-2026-14372 7.1 HighJuly 9, 2026
bitpressadmin bit integrations – form integration, webhook, spreadsheets, crm, lms & email automation Bit integrations <= 2.8.7 - Unauthenticated Server-Side Request Forgery via Form Field Upload Mapping CVE-2026-11989 Public exploit 6.5 MediumJune 19, 2026
bitpressadmin bit form – custom contact form, multi step, conversational form & payment form builder Bit Form – Contact Form Plugin <= 2.21.6 - Missing Authorization to Unauthenticated Workflow Replay CVE-2025-14901 6.5 MediumJanuary 7, 2026
bitpressadmin bit form – custom contact form, multi step, conversational form & payment form builder Contact Form by Bit Form - Bit Form <= 2.20.3 - Unauthenticated Arbitrary File Upload CVE-2025-6679 9.8 CriticalAugust 15, 2025
bitapps bit form, bitpressadmin bit form – custom contact form, multi step, conversational form & payment form builder +1 more Contact Form by Bit Form <= 2.17.5 - Unauthenticated Sensitive Information Exposure CVE-2024-13451 5.3 MediumJuly 2, 2025
bitpressadmin file manager Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Uploads CVE-2025-1725 6.4 MediumJune 3, 2025
bitpressadmin bit form – custom contact form, multi step, conversational form & payment form builder Contact Form by Bit Form <= 2.18.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload CVE-2025-2580 4.9 MediumApril 25, 2025
bitapps bit assist, bitpressadmin chat widget: floating customer support button for 30+ channels, supporting sms, calls, and chat – bit assist +1 more Bit Assist <= 1.5.2 - Path Traversal to Authenticated (Subscriber+) Arbitrary File Read via fileID Parameter CVE-2025-0822 6.5 MediumFebruary 15, 2025
bitapps bit assist, bitpressadmin chat widget: floating customer support button for 30+ channels, supporting sms, calls, and chat – bit assist +1 more Bit Assist <= 1.5.2 - Authenticated (Subscriber+) SQL Injection via id Parameter CVE-2025-0821 6.5 MediumFebruary 14, 2025
bitapps bit assist, bitpressadmin chat widget: floating customer support button for 30+ channels, supporting sms, calls, and chat – bit assist +1 more Bit Assist <= 1.5.2 - Path Traversal to Authenticated (Administrator+) Arbitrary File Read via downloadResponseFile Function CVE-2024-13791 4.9 MediumFebruary 14, 2025
bitapps contact form builder, bitpressadmin bit form – custom contact form, multi step, conversational form & payment form builder +1 more Contact Form by Bit Form <= 2.17.4 - Authenticated (Administrator+) Server-Side Request Forgery CVE-2024-13450 3.8 LowJanuary 25, 2025
bitpressadmin bit form – custom contact form, multi step, conversational form & payment form builder Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.17.3 - Missing Authorization to Authenticated (Subscriber+) Form Submissio… CVE-2024-12190 4.3 MediumDecember 25, 2024
bitpressadmin bit form – custom contact form, multi step, conversational form & payment form builder Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.15.2 - Authenticated (Administrator+) Improper Input Validation via iconUpl… CVE-2024-9507 4.9 MediumOctober 11, 2024
bitapps file manager Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.7 - Authenticated (Subscriber+) Limited JavaScript File Upload CVE-2024-8743 Public exploit 6.8 MediumOctober 5, 2024
bitapps file manager, bitpressadmin bit file manager wordpress +1 more Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.5 - Authenticated (Subscriber+) Arbitrary File Upload CVE-2024-7770 8.8 HighSeptember 10, 2024
bitapps file manager, bitpressadmin bit file manager – 100% free & open source file manager and code editor for wordpress +1 more Bit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race Condition CVE-2024-7627 Public exploit 8.1 HighSeptember 5, 2024
bitapps contact form builder, bitpressadmin contact form by bit form: multi step form, calculation contact form, payment contact form & custom contact form builder +1 more Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.4 - Authenticater (Administrator+) Arbitrary File Deletion CVE-2024-7782 8.7 HighAugust 20, 2024
bitapps contact form builder, bitpressadmin contact form by bit form: multi step form, calculation contact form, payment contact form & custom contact form builder, contact form by bit form multi step form +2 more Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection CVE-2024-7780 7.2 HighAugust 20, 2024
bitapps contact form builder, bitpressadmin contact form by bit form: multi step form, calculation contact form, payment contact form & custom contact form builder +1 more Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary File Read And Deletion CVE-2024-7777 9.0 CriticalAugust 20, 2024
bitapps contact form builder, bitpressadmin contact form by bit form: multi step form, calculation contact form, payment contact form & custom contact form builder +1 more Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary JavaScript File Uploads CVE-2024-7775 5.5 MediumAugust 20, 2024
bitapps contact form builder, bitpressadmin contact form by bit form: multi step form, calculation contact form, payment contact form & custom contact form builder +1 more Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection via getLogHistory Fu… CVE-2024-7702 7.2 HighAugust 20, 2024
bitapps bit form, bitpressadmin bit form – custom contact form, multi step, conversational form & payment form builder +1 more Bit Form <= 2.13.3 - Authenticated (Administrator+) Arbitrary File Upload CVE-2024-6123 7.2 HighJuly 9, 2024
bitapps contact form builder, bitpressadmin bit form – custom contact form, multi step, conversational form & payment form builder +1 more Contact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form <= 2.10.1 - Unauthenticated Insecure Direct Object Reference to Form Submission Alteration CVE-2024-1640 5.3 MediumMarch 13, 2024