Vendor

    Bitpressadmin

    29 known vulnerabilities in products by Bitpressadmin, 0 of them actively exploited (CISA KEV).

    Key figures

    29

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Bitpressadmin
    HighCVE-2024-7627

    Bit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race Condition

    also in 1 other product

    		8.1
    HighCVE-2026-15991

    Bitpressadmin File Manager: Missing Authorization

    		8.8
    HighCVE-2026-15006

    Bit integrations <= 2.9.0 - Unauthenticated Arbitrary File Read via Optional CF7 File Field

    		7.5
    HighCVE-2026-14372

    Bit Form <= 3.1.1 - Authenticated (Subscriber+) Arbitrary File Deletion via '_old' Parameter

    		7.1
    CriticalCVE-2025-6679

    Contact Form by Bit Form - Bit Form <= 2.20.3 - Unauthenticated Arbitrary File Upload

    		9.8
    HighCVE-2026-104749

    Improper Privilege Management (CVE-2026-104749)

    		7.5
    HighCVE-2024-7770

    Bitpressadmin File Manager: Unrestricted Upload of File with Dangerous Type

    also in 1 other product

    		8.8
    CriticalCVE-2024-7777

    Bitapps Contact Form Builder: Path Traversal

    also in 1 other product

    		9.0
    HighCVE-2024-7782

    Bitapps Contact Form Builder: Path Traversal

    also in 1 other product

    		8.7
    MediumCVE-2026-110185

    PHP Remote File Inclusion (CVE-2026-110185)

    		5.9
    HighCVE-2024-6123

    Bit Form <= 2.13.3 - Authenticated (Administrator+) Arbitrary File Upload

    		7.2
    HighCVE-2026-102007

    Cross-site Scripting (CVE-2026-102007)

    		7.2
    MediumCVE-2026-16810

    Bit Form <= 3.2.0 - Authenticated (Administrator+) SQL Injection via 'filterText' Parameter

    		6.5
    MediumCVE-2024-8743

    Bitpressadmin File Manager: Unrestricted Upload of File with Dangerous Type

    		6.8
    MediumCVE-2026-11989

    Server-Side Request Forgery (SSRF) (CVE-2026-11989)

    		6.5
    MediumCVE-2025-0822

    Bitapps Bit Assist: Relative Path Traversal

    also in 1 other product

    		6.5
    MediumCVE-2025-0821

    Bit Assist <= 1.5.2 - Authenticated (Subscriber+) SQL Injection via id Parameter

    also in 1 other product

    		6.5
    HighCVE-2024-7780

    Bitapps Contact Form Builder: SQL Injection

    also in 1 other product

    		7.2
    MediumCVE-2025-14901

    Bit Form – Contact Form Plugin <= 2.21.6 - Missing Authorization to Unauthenticated Workflow Replay

    		6.5
    HighCVE-2024-7702

    Bitapps Contact Form Builder: SQL Injection

    also in 1 other product

    		7.2
    MediumCVE-2024-13791

    Bitapps Bit Assist: Relative Path Traversal

    also in 1 other product

    		4.9
    MediumCVE-2024-9507

    Improper Input Validation (CVE-2024-9507)

    		4.9
    MediumCVE-2024-1640

    Bitapps Contact Form Builder: Authorization Bypass Through User-Controlled Key

    also in 1 other product

    		5.3
    HighCVE-2024-13451

    Contact Form by Bit Form <= 2.17.5 - Unauthenticated Sensitive Information Exposure

    also in 1 other product

    		5.3
    MediumCVE-2025-1725

    Bitpressadmin File Manager: Unrestricted Upload of File with Dangerous Type

    		6.4

    All vulnerabilities in search

    Products

    Products by Bitpressadmin
    Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form Builder90
    Contact Form By Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form Builder50
    Bit Integrations – Form Integration, Webhook, Spreadsheets, Crm, Lms & Email Automation40
    File Manager40
    Chat Widget: Floating Customer Support Button For 30+ Channels, Supporting Sms, Calls, And Chat – Bit Assist30