Latest vulnerabilities for vendor "bitapps"

Where

Sort:

Software

bitapps bit form wordpress

bitapps bit assist wordpress

bitapps contact form builder wordpress

bitapps file manager

bitapps file manager wordpress

bitapps bit form

Bit Form Contact FormContact Form by Bit Form <= 2.17.5 - Unauthenticated Sensitive Information Exposure

Risk 43

Severity

7.5

First published (updated )

CVE-2024-13451

Bit Assist Bit AssistBit Assist <= 1.5.2 - Path Traversal to Authenticated (Subscriber+) Arbitrary File Read via fileID Parameter

Risk 38

Severity

6.5

First published (updated )

CVE-2025-0822

Bit Assist Bit AssistBit Assist <= 1.5.2 - Authenticated (Subscriber+) SQL Injection via id Parameter

Risk 38

Severity

6.5

First published (updated )

CVE-2025-0821

Bit Assist Bit AssistBit Assist <= 1.5.2 - Path Traversal to Authenticated (Administrator+) Arbitrary File Read via downloadResponseFile Function

Risk 30

Severity

4.9

First published (updated )

CVE-2024-13791

Bitapps Contact Form Builder WordpressContact Form by Bit Form <= 2.17.4 - Authenticated (Administrator+) Server-Side Request Forgery

Risk 49

Severity

6.5

First published (updated )

CVE-2024-13450

Bitapps File Manager WordpressBit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.5 - Authenticated (Subscriber+) Arbitrary File Upload

Risk 56

Severity

8.8

EPSS

0.09%

First published (updated )

CVE-2024-7770

Bitapps File Manager WordpressBit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race Condition

Risk 54

Severity

8.1

EPSS

0.06%

First published (updated )

CVE-2024-7627

Bitapps Bit Form WordpressWordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Sensitive Data Exposure vulnerability

Risk 38

Severity

6.5

First published (updated )

CVE-2024-43251

Bitapps Contact Form Builder WordpressContact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.4 - Authenticater (Administrator+) Arbitrary File Deletion

Risk 44

Severity

8.7

EPSS

0.05%

First published (updated )

CVE-2024-7782

Bitapps Contact Form Builder WordpressContact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection

Risk 49

Severity

7.2

EPSS

0.08%

First published (updated )

CVE-2024-7780

Bitapps Contact Form Builder WordpressContact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary JavaScript File Uploads

Risk 24

Severity

5.5

EPSS

0.04%

First published (updated )

CVE-2024-7775

Bitapps Contact Form Builder WordpressContact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary File Read And Deletion

Risk 51

Severity

EPSS

0.06%

First published (updated )

CVE-2024-7777

Bitapps Contact Form Builder WordpressContact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection via getLogHistory Function

Risk 49

Severity

7.2

EPSS

0.05%

First published (updated )

CVE-2024-7702

Bitapps Bit Form WordpressWordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Plugin Settings Change vulnerability

Risk 48

Severity

7.1

First published (updated )

CVE-2024-43250

Bitapps Bit Form WordpressWordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Arbitrary File Upload vulnerability

Risk 82

Severity

9.9

First published (updated )

CVE-2024-43249

Bitapps Bit Form WordpressWordPress Bit Form Pro plugin <= 2.6.4 - Unauthenticated Arbitrary File Deletion vulnerability

Risk 66

Severity

9.1

First published (updated )

CVE-2024-43248

Bitapps Contact Form Builder WordpressContact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form <= 2.10.1 - Unauthenticated Insecure Direct Object Reference to Form Submission Alteration

Risk 27

Severity

5.3

First published (updated )

CVE-2024-1640

Bitapps Bit Assist WordpressWordPress Bit Assist Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)

Risk 40

Severity

5.9

First published (updated )

CVE-2023-51371

Bitapps File Manager WordpressWordPress File Manager Plugin <= 5.2.7 is vulnerable to PHP Object Injection

Risk 66

Severity

7.2

First published (updated )

CVE-2022-47599

Bitapps File Manager WordpressFile Manager < 6.3 - Admin+ Arbitrary OS File/Folder Access + Path Traversal

Risk 37

Severity

6.5

EPSS

0.05%

First published (updated )

CVE-2023-5907

Bitapps Bit Assist WordpressBit Assist < 1.1.9 - Admin+ Stored Cross-Site Scripting

Risk 29

Severity

4.8

First published (updated )

CVE-2023-3667

Bitapps Contact Form Builder WordpressContact Form Builder by Bit Form < 2.2.0 - Admin+ Stored XSS

Risk 29

Severity

4.8

First published (updated )

CVE-2023-3645

Bitapps Bit Form WordpressBit Form < 1.9 - RCE via Unauthenticated Arbitrary File Upload

Risk 86

Severity

9.8

First published (updated )

CVE-2022-4774

Trending

Vendor Risk Score

Software

Bit Form Contact FormContact Form by Bit Form <= 2.17.5 - Unauthenticated Sensitive Information Exposure

Bit Assist Bit AssistBit Assist <= 1.5.2 - Path Traversal to Authenticated (Subscriber+) Arbitrary File Read via fileID Parameter

Bit Assist Bit AssistBit Assist <= 1.5.2 - Authenticated (Subscriber+) SQL Injection via id Parameter

Bit Assist Bit AssistBit Assist <= 1.5.2 - Path Traversal to Authenticated (Administrator+) Arbitrary File Read via downloadResponseFile Function

Bitapps Contact Form Builder WordpressContact Form by Bit Form <= 2.17.4 - Authenticated (Administrator+) Server-Side Request Forgery

Don't miss critical vulnerabilities

Bitapps File Manager WordpressBit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.5 - Authenticated (Subscriber+) Arbitrary File Upload

Bitapps File Manager WordpressBit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race Condition

Bitapps Bit Form WordpressWordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Sensitive Data Exposure vulnerability

Bitapps Contact Form Builder WordpressContact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.4 - Authenticater (Administrator+) Arbitrary File Deletion

Bitapps Contact Form Builder WordpressContact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection

Don't miss critical vulnerabilities

Bitapps Contact Form Builder WordpressContact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary JavaScript File Uploads

Bitapps Contact Form Builder WordpressContact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary File Read And Deletion

Bitapps Contact Form Builder WordpressContact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection via getLogHistory Function

Bitapps Bit Form WordpressWordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Plugin Settings Change vulnerability

Bitapps Bit Form WordpressWordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Arbitrary File Upload vulnerability

Don't miss critical vulnerabilities

Bitapps Bit Form WordpressWordPress Bit Form Pro plugin <= 2.6.4 - Unauthenticated Arbitrary File Deletion vulnerability

Bitapps Contact Form Builder WordpressContact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form <= 2.10.1 - Unauthenticated Insecure Direct Object Reference to Form Submission Alteration

Bitapps Bit Assist WordpressWordPress Bit Assist Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)

Bitapps File Manager WordpressWordPress File Manager Plugin <= 5.2.7 is vulnerable to PHP Object Injection

Bitapps File Manager WordpressFile Manager < 6.3 - Admin+ Arbitrary OS File/Folder Access + Path Traversal

Don't miss critical vulnerabilities

Bitapps Bit Assist WordpressBit Assist < 1.1.9 - Admin+ Stored Cross-Site Scripting

Bitapps Contact Form Builder WordpressContact Form Builder by Bit Form < 2.2.0 - Admin+ Stored XSS

Bitapps Bit Form WordpressBit Form < 1.9 - RCE via Unauthenticated Arbitrary File Upload

Company

Resources

Contact