Bitpressadmin vulnerabilities
We track 13 vulnerabilities in Bitpressadmin products across 8 products. 13 are rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.
Latest Bitpressadmin vulnerabilities
- 7.5 High severity
Bit integrations – Form Integration, Webhook…: Improper Privilege Management
The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Privilege Escalation via Log Re-execution in all versions up to, and including, 2.10.6 The vulnerability exists because `Integrati
- 7.2 High severity
Bit integrations – Form Integration, Webhook…: Improper Neutralization of Input During Web Page Generation
The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'field mapped to notification_content (attacker-chosen key, e.g. payload_text)' parameter in a
- 8.8 High severity
File Manager: Missing Authorization
The File Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the connector function in all versions from 6.0 - 6.9. This makes it possible for authenticated attackers, with subscriber-level access a
- 7.5 High severity
Bit integrations – Form Integration, Webhook…: Improper Limitation of a Pathname to a Restricted Directory
The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.9.0 via the processAttachment function. This makes it possible for una
- 7.1 High severity
Bit Form – Contact Form, Payment Forms, Multi…: Improper Limitation of a Pathname to a Restricted Directory
The Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteFiles function in all versions up to, and includi
- 9.8 Critical severity
Bit Form – Custom Contact Form, Multi Step…: Unrestricted Upload of File with Dangerous Type
The Bit Form builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 2.20.4. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected s
- 7.5 High severity
Bit Form – Custom Contact Form, Multi Step…: Exposure of Sensitive Information to an Unauthorized Actor
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.17.4 via file uploads due t
- 8.8 High severity
File Manager: Unrestricted Upload of File with Dangerous Type
The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload' function in all versions up to, and including, 6.5.5. Thi
- 8.1 High severity
Bit File Manager – 100% Free & Open Source…: Concurrent Execution using Shared Resource with Improper Synchronization
The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'checkSyntax' function. This is due to writing a temporary file to a publicly accessible directory before performing file validation. This makes i
- 7.2 High severity
Contact Form by Bit Form: Multi Step Form…: Improper Neutralization of Special Elements used in an SQL Command
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to generic SQL Injection via the id parameter in versions 2.0 to 2.13.9 due to insufficient escaping
- 9.0 Critical severity
Contact Form by Bit Form: Multi Step Form…: Improper Limitation of a Pathname to a Restricted Directory
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file path validation in multiple functions in
- 7.2 High severity
Contact Form by Bit Form: Multi Step Form…: Improper Neutralization of Special Elements used in an SQL Command
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to generic SQL Injection via the entryID parameter in versions 2.0 to 2.13.9 due to insufficient esca
- 7.2 High severity
Bit Form – Custom Contact Form, Multi Step…: Unrestricted Upload of File with Dangerous Type
The Bit Form plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'iconUpload' function in all versions up to, and including, 2.13.3. This makes it possible for authenticated attackers, with administrator-leve