Vendor
Bit Apps
13 known vulnerabilities in products by Bit Apps, 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-43249 | WordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Arbitrary File Upload vulnerability | 9.9 | |
| Critical | CVE-2024-43248 | WordPress Bit Form Pro plugin <= 2.6.4 - Unauthenticated Arbitrary File Deletion vulnerability | 8.6 | |
| Critical | CVE-2026-32519 | WordPress Bit SMTP plugin <= 1.2.2 - Broken Authentication vulnerability | 9.0 | |
| High | CVE-2025-30834 | WordPress Bit Assist plugin <= 1.5.4 - Path Traversal vulnerability | 7.5 | |
| High | CVE-2024-47319 | WordPress Bit Form plugin <= 2.13.10 - Arbitrary File Upload vulnerability | 8.0 | |
| High | CVE-2026-25418 | WordPress Bit Form plugin <= 2.21.10 - SQL Injection vulnerability | 7.6 | |
| High | CVE-2024-47335 | WordPress Bit Form plugin <= 2.13.11 - SQL Injection vulnerability | 7.6 | |
| Medium | CVE-2024-43251 | WordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Sensitive Data Exposure vulnerability | 6.5 | |
| High | CVE-2024-47301 | WordPress Bit Form plugin <= 2.13.10 - Cross Site Scripting (XSS) vulnerability | 7.1 | |
| High | CVE-2024-43250 | WordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Plugin Settings Change vulnerability | 7.1 | |
| Medium | CVE-2025-30885 | WordPress Bit Form plugin <= 2.18.0 - Open Redirection vulnerability | 4.7 | |
| Medium | CVE-2025-30884 | WordPress Bit Integrations plugin <= 2.4.10 - Open Redirection vulnerability | 4.7 | |
| Medium | CVE-2025-68596 | WordPress Bit Assist plugin <= 1.5.11 - Broken Access Control vulnerability | 5.3 |
Products
| Bit Form | 5 | 0 |
| Bit Form Pro | 4 | 0 |