Vendor
Bit Apps
23 known vulnerabilities in products by Bit Apps, 0 of them actively exploited (CISA KEV).
Key figures
23
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-7627 | Bit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race Condition | 8.1 | |
| Critical | CVE-2022-4774 | Bit Form < 1.9 - RCE via Unauthenticated Arbitrary File Upload | 9.8 | |
| Critical | CVE-2024-43249 | WordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Arbitrary File Upload vulnerability | 9.9 | |
| High | CVE-2024-7770 | Bitpressadmin File Manager: Unrestricted Upload of File with Dangerous Type | 8.8 | |
| Critical | CVE-2024-7777 | Bitapps Contact Form Builder: Path Traversal | 9.0 | |
| High | CVE-2024-7782 | Bitapps Contact Form Builder: Path Traversal | 8.7 | |
| Critical | CVE-2024-43248 | WordPress Bit Form Pro plugin <= 2.6.4 - Unauthenticated Arbitrary File Deletion vulnerability | 8.6 | |
| Medium | CVE-2023-5907 | File Manager < 6.3 - Admin+ Arbitrary OS File/Folder Access + Path Traversal | 6.5 | |
| Medium | CVE-2025-0822 | Bitapps Bit Assist: Relative Path Traversal | 6.5 | |
| Medium | CVE-2025-0821 | Bit Assist <= 1.5.2 - Authenticated (Subscriber+) SQL Injection via id Parameter | 6.5 | |
| High | CVE-2024-7780 | Bitapps Contact Form Builder: SQL Injection | 7.2 | |
| High | CVE-2024-7702 | Bitapps Contact Form Builder: SQL Injection | 7.2 | |
| Medium | CVE-2024-13791 | Bitapps Bit Assist: Relative Path Traversal | 4.9 | |
| Medium | CVE-2024-43251 | WordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Sensitive Data Exposure vulnerability | 6.5 | |
| High | CVE-2022-47599 | WordPress File Manager Plugin <= 5.2.7 is vulnerable to PHP Object Injection | 5.5 | |
| High | CVE-2024-43250 | WordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Plugin Settings Change vulnerability | 7.1 | |
| Medium | CVE-2024-1640 | Bitapps Contact Form Builder: Authorization Bypass Through User-Controlled Key | 5.3 | |
| High | CVE-2024-13451 | Contact Form by Bit Form <= 2.17.5 - Unauthenticated Sensitive Information Exposure | 5.3 | |
| Medium | CVE-2023-3667 | Bit Assist < 1.1.9 - Admin+ Stored Cross-Site Scripting | 4.8 | |
| Medium | CVE-2023-3645 | Contact Form Builder by Bit Form < 2.2.0 - Admin+ Stored XSS | 4.8 | |
| Medium | CVE-2023-51371 | WordPress Bit Assist Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS) | 5.9 | |
| Medium | CVE-2024-13450 | Contact Form by Bit Form <= 2.17.4 - Authenticated (Administrator+) Server-Side Request Forgery | 3.8 | |
| Medium | CVE-2024-7775 | Bitapps Contact Form Builder: Cross-site Scripting | 5.5 |
Products
| Contact Form by Bit Form | 8 | 0 |
| Bit Form Pro | 6 | 0 |
| Chat Widget | 5 | 0 |
| File Manager | 4 | 0 |