Contact Form Builder vulnerabilities
3 known vulnerabilities in Contact Form Builder from Bitapps. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
Contact Form by Bit Form: Multi Step Form…: Improper Neutralization of Special Elements used in an SQL Command
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to generic SQL Injection via the id parameter in versions 2.0 to 2.13.9 due to insufficient escaping
- 9.0 Critical severity
Contact Form by Bit Form: Multi Step Form…: Improper Limitation of a Pathname to a Restricted Directory
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file path validation in multiple functions in
- 7.2 High severity
Contact Form by Bit Form: Multi Step Form…: Improper Neutralization of Special Elements used in an SQL Command
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to generic SQL Injection via the entryID parameter in versions 2.0 to 2.13.9 due to insufficient esca