Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder vulnerabilities

Product

Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder

by bitpressadmin · last CVE Aug 20, 2024

CVEs

On KEV

9.0

Max CVSS

New 30D

Vulnerabilities5 In the news0 Timeline

Severity mix

Critical 1High 2Medium 2Low 0

Severity

All severities5 Critical1 High2 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-7777	9.0	1%	Aug 20	Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary File Read And Deletion Affected: 2.0 through 2.13.9
CVE-2024-7780	7.2	1%	Aug 20	Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection Affected: 2.0 through 2.13.9
CVE-2024-7702	7.2	0%	Aug 20	Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection via getLogHistory Function Affected: 2.0 through 2.13.9
CVE-2024-7782	6.5	1%	Aug 20	Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.4 - Authenticater (Administrator+) Arbitrary File Deletion Affected: 2.0 through 2.13.4
CVE-2024-7775	4.8	0%	Aug 20	Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary JavaScript File Uploads Affected: 2.0 through 2.13.9