bitpressadmin vulnerabilities

CVEs per yearBy the year they were published

1. 202412
2. 20258
3. 20269

Newest CVEs

• CVE-2026-110185

  Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More <= 1.31.0 - Unauthenticated Local File Inclusion via 'webhook' and 'body' Parameters

  bitpressadmin · Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More

  Medium5.9
• CVE-2026-104749

  Bit integrations <= 2.10.6 - Unauthenticated Privilege Escalation via Identity-Confused Log Re-execution to Account Takeover via Log Re-execution of Anonymous-Captured Field Data

  bitpressadmin · Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation

  High7.5
• CVE-2026-102007

  Bit integrations <= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via 'notification_content' Field via Public Bit Assist Webhook Callback

  bitpressadmin · Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation

  High7.2
• CVE-2026-16810

  Bit Form <= 3.2.0 - Authenticated (Administrator+) SQL Injection via 'filterText' Parameter

  bitpressadmin · Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder

  Medium6.5
• CVE-2026-15991

  File Manager 6.0 - 6.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read and Deletion via 'cmd' Query Parameter

  bitpressadmin · File Manager

  High8.8
• CVE-2026-15006

  Bit integrations <= 2.9.0 - Unauthenticated Arbitrary File Read via Optional CF7 File Field

  bitpressadmin · Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation

  High7.5
• CVE-2026-14372

  Bit Form <= 3.1.1 - Authenticated (Subscriber+) Arbitrary File Deletion via '_old' Parameter

  bitpressadmin · Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder

  High7.1
• CVE-2026-11989

  Bit integrations <= 2.8.7 - Unauthenticated Server-Side Request Forgery via Form Field Upload Mapping

  bitpressadmin · Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation

  Medium6.5
• CVE-2025-14901

  Bit Form – Contact Form Plugin <= 2.21.6 - Missing Authorization to Unauthenticated Workflow Replay

  bitpressadmin · Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder

  Medium6.5
• CVE-2025-6679

  Contact Form by Bit Form - Bit Form <= 2.20.3 - Unauthenticated Arbitrary File Upload

  bitpressadmin · Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder

  Critical9.8