Bit Apps Bit Form vulnerabilities

Latest Bit Apps Bit Form CVEs

Newest publication first

1. CVE-2026-25418 WordPress Bit Form plugin <= 2.21.10 - SQL Injection vulnerability

   Published 2026-02-19

   High·CVSS 7.6 EPSS 0.31%

   Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bit Apps Bit Form bit-form allows SQL Injection.This issue affects Bit Form: from n/a through <= 2.21.10.

2. CVE-2025-30885 WordPress Bit Form plugin <= 2.18.0 - Open Redirection vulnerability

   Published 2025-03-27

   Medium·CVSS 4.7 EPSS 0.43%

   URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Bit Apps Bit Form bit-form allows Phishing.This issue affects Bit Form: from n/a through <= 2.18.0.

3. CVE-2024-47335 WordPress Bit Form plugin <= 2.13.11 - SQL Injection vulnerability

   Published 2024-10-07

   High·CVSS 7.6 EPSS 0.42%

   Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bit Apps Bit Form bit-form allows SQL Injection.This issue affects Bit Form: from n/a through <= 2.13.11.

4. CVE-2024-47301 WordPress Bit Form plugin <= 2.13.10 - Cross Site Scripting (XSS) vulnerability

   Published 2024-10-06

   High·CVSS 7.1 EPSS 0.32%

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bit Apps Bit Form bit-form allows Stored XSS.This issue affects Bit Form: from n/a through <= 2.13.10.

5. CVE-2024-47319 WordPress Bit Form plugin <= 2.13.10 - Arbitrary File Upload vulnerability

   Published 2024-10-05

   High·CVSS 8.0 EPSS 0.43%

   Unrestricted Upload of File with Dangerous Type vulnerability in Bit Apps Bit Form bit-form.This issue affects Bit Form: from n/a through <= 2.13.10.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.