BI
Vendor
bitpressadmin
30
CVEs
0
On KEV
3
New 30D
Products
BI7.5
Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation
bitpressadmin
4 CVEs0 on KEV2 new
BF5.9
Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More
bitpressadmin
1 CVEs0 on KEV1 new
BF9.8
Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder
bitpressadmin
8 CVEs0 on KEV0 new
CF9.0
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder
bitpressadmin
5 CVEs0 on KEV0 new
FM8.8
File Manager
bitpressadmin
4 CVEs0 on KEV0 new
CW6.5
Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist
bitpressadmin
3 CVEs0 on KEV0 new
BF7.1
Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder
bitpressadmin
2 CVEs0 on KEV0 new
BF8.1
Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress
bitpressadmin
1 CVEs0 on KEV0 new
BF8.8
Bit File Manager Wordpress
Bitpressadmin
1 CVEs0 on KEV0 new
CF7.2
Contact Form BY Bit Form Multi Step Form
Bitpressadmin
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110185 New | BF Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More bitpressadmin | 5.9 | Oct 28 | Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More <= 1.31.0 - Unauthenticated Local File Inclusion via 'webhook' and 'body' Parameters |
| CVE-2026-104749 | BI Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation bitpressadmin | 7.5 | Oct 14 | Bit integrations <= 2.10.6 - Unauthenticated Privilege Escalation via Identity-Confused Log Re-execution to Account Takeover via Log Re-execution of Anonymous-Captured Field Data |
| CVE-2026-102007 | BI Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation bitpressadmin | 7.2 | Oct 13 | Bit integrations <= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via 'notification_content' Field via Public Bit Assist Webhook Callback |
| CVE-2026-16810 | BF Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder bitpressadmin | 6.5 | Aug 14 | Bit Form <= 3.2.0 - Authenticated (Administrator+) SQL Injection via 'filterText' Parameter |
| CVE-2026-15991 | FM File Manager bitpressadmin | 8.8 | Aug 6 | File Manager 6.0 - 6.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read and Deletion via 'cmd' Query Parameter |
| CVE-2026-15006 | BI Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation bitpressadmin | 7.5 | Aug 1 | Bit integrations <= 2.9.0 - Unauthenticated Arbitrary File Read via Optional CF7 File Field |
| CVE-2026-14372 | BF Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder bitpressadmin | 7.1 | Jul 9 | Bit Form <= 3.1.1 - Authenticated (Subscriber+) Arbitrary File Deletion via '_old' Parameter |
| CVE-2026-11989 | BI Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation bitpressadmin | 6.5 | Jun 19 | Bit integrations <= 2.8.7 - Unauthenticated Server-Side Request Forgery via Form Field Upload Mapping |
| CVE-2025-14901 | BF Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder bitpressadmin | 6.5 | Jan 7 | Bit Form – Contact Form Plugin <= 2.21.6 - Missing Authorization to Unauthenticated Workflow Replay |
| CVE-2025-6679 | BF Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder bitpressadmin | 9.8 | Aug 15 | Contact Form by Bit Form - Bit Form <= 2.20.3 - Unauthenticated Arbitrary File Upload |
| CVE-2024-13451 | BF Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder bitpressadmin | 7.5 | Jul 2 | Contact Form by Bit Form <= 2.17.5 - Unauthenticated Sensitive Information Exposure |
| CVE-2025-1725 | FM File Manager bitpressadmin | 6.4 | Jun 3 | Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Uploads |
| CVE-2025-2580 | BF Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder bitpressadmin | 4.9 | Apr 25 | Contact Form by Bit Form <= 2.18.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload |
| CVE-2025-0822 | CW Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist bitpressadmin | 6.5 | Feb 15 | Bit Assist <= 1.5.2 - Path Traversal to Authenticated (Subscriber+) Arbitrary File Read via fileID Parameter |
| CVE-2025-0821 | CW Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist bitpressadmin | 6.5 | Feb 14 | Bit Assist <= 1.5.2 - Authenticated (Subscriber+) SQL Injection via id Parameter |
| CVE-2024-13791 | CW Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist bitpressadmin | 4.9 | Feb 14 | Bit Assist <= 1.5.2 - Path Traversal to Authenticated (Administrator+) Arbitrary File Read via downloadResponseFile Function |
| CVE-2024-13450 | BF Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder bitpressadmin | 6.5 | Jan 25 | Contact Form by Bit Form <= 2.17.4 - Authenticated (Administrator+) Server-Side Request Forgery |
| CVE-2024-12190 | BF Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder bitpressadmin | 4.3 | Dec 25 | Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.17.3 - Missing Authorization to Authenticated (Subscriber+) Form Submission Disclosure |
| CVE-2024-9507 | BF Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder bitpressadmin | 4.9 | Oct 11 | Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.15.2 - Authenticated (Administrator+) Improper Input Validation via iconUpload Function to Arbitrary File Read |
| CVE-2024-8743 | FM File Manager bitpressadmin | 6.8 | Oct 5 | Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.7 - Authenticated (Subscriber+) Limited JavaScript File Upload |
| CVE-2024-7770 | FM File Manager bitpressadmin | 8.8 | Sep 10 | Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.5 - Authenticated (Subscriber+) Arbitrary File Upload |
| CVE-2024-7627 | BF Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress bitpressadmin | 8.1 | Sep 5 | Bit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race Condition |
| CVE-2024-7782 | CF Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder bitpressadmin | 6.5 | Aug 20 | Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.4 - Authenticater (Administrator+) Arbitrary File Deletion |
| CVE-2024-7780 | CF Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder bitpressadmin | 7.2 | Aug 20 | Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection |
| CVE-2024-7777 | CF Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder bitpressadmin | 9.0 | Aug 20 | Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary File Read And Deletion |
| CVE-2024-7775 | CF Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder bitpressadmin | 4.8 | Aug 20 | Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary JavaScript File Uploads |
| CVE-2024-7702 | CF Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder bitpressadmin | 7.2 | Aug 20 | Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection via getLogHistory Function |
| CVE-2024-6123 | BF Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder bitpressadmin | 7.2 | Jul 9 | Bit Form <= 2.13.3 - Authenticated (Administrator+) Arbitrary File Upload |