Bitapps vulnerabilities
We track 9 vulnerabilities in Bitapps products across 4 products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on July 2, 2025.
Latest Bitapps vulnerabilities
- 7.5 High severity
Bit Form – Custom Contact Form, Multi Step…: Exposure of Sensitive Information to an Unauthorized Actor
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.17.4 via file uploads due t
- 8.1 High severity
Bit File Manager – 100% Free & Open Source…: Concurrent Execution using Shared Resource with Improper Synchronization
The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'checkSyntax' function. This is due to writing a temporary file to a publicly accessible directory before performing file validation. This makes i
- 7.2 High severity
Contact Form by Bit Form: Multi Step Form…: Improper Neutralization of Special Elements used in an SQL Command
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to generic SQL Injection via the id parameter in versions 2.0 to 2.13.9 due to insufficient escaping
- 9.0 Critical severity
Contact Form by Bit Form: Multi Step Form…: Improper Limitation of a Pathname to a Restricted Directory
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file path validation in multiple functions in
- 7.2 High severity
Contact Form by Bit Form: Multi Step Form…: Improper Neutralization of Special Elements used in an SQL Command
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to generic SQL Injection via the entryID parameter in versions 2.0 to 2.13.9 due to insufficient esca
- 8.8 High severity
Bit Form Pro: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in Bit Apps Bit Form Pro allows Command Injection.This issue affects Bit Form Pro: from n/a through 2.6.4.
- 9.1 Critical severity
Bit Form Pro: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bit Apps Bit Form Pro allows File Manipulation.This issue affects Bit Form Pro: from n/a through 2.6.4.
- 7.2 High severity
Bit Form – Custom Contact Form, Multi Step…: Unrestricted Upload of File with Dangerous Type
The Bit Form plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'iconUpload' function in all versions up to, and including, 2.13.3. This makes it possible for authenticated attackers, with administrator-leve
- 7.2 High severity
File Manager – 100% Free & Open Source File…: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in File Manager by Bit Form Team File Manager – 100% Free & Open Source File Manager Plugin for WordPress | Bit File Manager.This issue affects File Manager – 100% Free & Open Source File Manager Plugin for WordP