Bit Apps güvenlik açıkları (CVE)

7.1Yüksek

CVE-2026-125760 2 saat önce

WordPress Bit Assist plugin <= 1.8.4 - Cross Site Scripting (XSS) vulnerability

Bit Apps Bit Assist

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bit Apps Bit Assist bit-assist allows DOM-Based XSS.This issue affects Bit Assist: from n/a through 1.8.4.

9.0Kritik

CVE-2026-32519 7 ay önce

WordPress Bit SMTP plugin <= 1.2.2 - Broken Authentication vulnerability

Bit Apps Bit SMTP

Incorrect Privilege Assignment vulnerability in Bit Apps Bit SMTP bit-smtp allows Privilege Escalation.This issue affects Bit SMTP: from n/a through <= 1.2.2.

7.6Yüksek

CVE-2026-25418 8 ay önce

WordPress Bit Form plugin <= 2.21.10 - SQL Injection vulnerability

Bit Apps Bit Form

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bit Apps Bit Form bit-form allows SQL Injection.This issue affects Bit Form: from n/a through <= 2.21.10.

5.3Orta

CVE-2025-68596 10 ay önce

WordPress Bit Assist plugin <= 1.5.11 - Broken Access Control vulnerability

Bit Apps Bit Assist

Missing Authorization vulnerability in Bit Apps Bit Assist bit-assist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bit Assist: from n/a through <= 1.5.11.

7.5Yüksek

CVE-2025-30834 1 yıl önce

WordPress Bit Assist plugin <= 1.5.4 - Path Traversal vulnerability

Bit Apps Bit Assist

Path Traversal: '.../...//' vulnerability in Bit Apps Bit Assist bit-assist allows Path Traversal.This issue affects Bit Assist: from n/a through <= 1.5.4.

4.7Orta

CVE-2025-30885 1 yıl önce

WordPress Bit Form plugin <= 2.18.0 - Open Redirection vulnerability

Bit Apps Bit Form

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Bit Apps Bit Form bit-form allows Phishing.This issue affects Bit Form: from n/a through <= 2.18.0.

4.7Orta

CVE-2025-30884 1 yıl önce

WordPress Bit Integrations plugin <= 2.4.10 - Open Redirection vulnerability

Bit Apps Bit Integrations

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Bit Apps Bit Integrations bit-integrations allows Phishing.This issue affects Bit Integrations: from n/a through <= 2.4.10.

7.6Yüksek

CVE-2024-47335 2 yıl önce

WordPress Bit Form plugin <= 2.13.11 - SQL Injection vulnerability

Bit Apps Bit Form

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bit Apps Bit Form bit-form allows SQL Injection.This issue affects Bit Form: from n/a through <= 2.13.11.

7.1Yüksek

CVE-2024-47301 2 yıl önce

WordPress Bit Form plugin <= 2.13.10 - Cross Site Scripting (XSS) vulnerability

Bit Apps Bit Form

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bit Apps Bit Form bit-form allows Stored XSS.This issue affects Bit Form: from n/a through <= 2.13.10.

8.0Yüksek

CVE-2024-47319 2 yıl önce

WordPress Bit Form plugin <= 2.13.10 - Arbitrary File Upload vulnerability

Bit Apps Bit Form; bitapps bit_form

Unrestricted Upload of File with Dangerous Type vulnerability in Bit Apps Bit Form bit-form.This issue affects Bit Form: from n/a through <= 2.13.10.

6.5Orta

CVE-2024-43251 2 yıl önce

WordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Sensitive Data Exposure vulnerability

Bit Apps Bit Form Pro

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Bit Apps Bit Form Pro.This issue affects Bit Form Pro: from n/a through 2.6.4.

7.1Yüksek

CVE-2024-43250 2 yıl önce

WordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Plugin Settings Change vulnerability

Bit Apps Bit Form Pro

Incorrect Authorization vulnerability in Bit Apps Bit Form Pro bitformpro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bit Form Pro: from n/a through 2.6.4.

9.9Kritik

CVE-2024-43249 2 yıl önce

WordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Arbitrary File Upload vulnerability

Bit Apps Bit Form Pro; bitapps bit_form_pro

Unrestricted Upload of File with Dangerous Type vulnerability in Bit Apps Bit Form Pro allows Command Injection.This issue affects Bit Form Pro: from n/a through 2.6.4.

1.0%EPSS

8.6Yüksek

CVE-2024-43248 2 yıl önce

WordPress Bit Form Pro plugin <= 2.6.4 - Unauthenticated Arbitrary File Deletion vulnerability

Bit Apps Bit Form Pro; bitapps bit_form_pro

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bit Apps Bit Form Pro allows File Manipulation.This issue affects Bit Form Pro: from n/a through 2.6.4.