BF
Product
Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 6Low 0
Watch
Add Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-6679 | 9.8 | Aug 15 | Contact Form by Bit Form - Bit Form <= 2.20.3 - Unauthenticated Arbitrary File Upload Affected: through 2.20.3 |
| CVE-2024-13451 | 7.5 | Jul 2 | Contact Form by Bit Form <= 2.17.5 - Unauthenticated Sensitive Information Exposure Affected: through 2.17.5 |
| CVE-2024-6123 | 7.2 | Jul 9 | Bit Form <= 2.13.3 - Authenticated (Administrator+) Arbitrary File Upload Affected: through 2.13.3 |
| CVE-2025-14901 | 6.5 | Jan 7 | Bit Form – Contact Form Plugin <= 2.21.6 - Missing Authorization to Unauthenticated Workflow Replay Affected: through 2.21.6 |
| CVE-2024-13450 | 6.5 | Jan 25 | Contact Form by Bit Form <= 2.17.4 - Authenticated (Administrator+) Server-Side Request Forgery Affected: through 2.17.4 |
| CVE-2024-1640 | 5.3 | Mar 13 | Contact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form <= 2.10.1 - Unauthenticated Insecure Direct Object Reference to Form Submission Alteration Affected: through 2.10.1 |
| CVE-2025-2580 | 4.9 | Apr 25 | Contact Form by Bit Form <= 2.18.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload Affected: through 2.18.3 |
| CVE-2024-9507 | 4.9 | Oct 11 | Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.15.2 - Authenticated (Administrator+) Improper Input Validation via iconUpload Function to Arbitrary File Read Affected: through 2.15.2 |
| CVE-2024-12190 | 4.3 | Dec 25 | Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.17.3 - Missing Authorization to Authenticated (Subscriber+) Form Submission Disclosure Affected: through 2.17.3 |
Showing 9