Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
Bit Form - Remote Code Execution (CVE-2024-7782)
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the iconRemove function in versions 2.0 to 2.13.4. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).
PLUGIN
Bit Form
CVE-2024-7782
Risk Score
Threat Entry
Updated 2026-06-17
Bit Form - Remote Code Execution (CVE-2024-7777)
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file path validation in multiple functions in versions 2.0 to 2.13.9. This makes it possible for authenticated attackers, with Administrator-level access and above, to read and delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).
PLUGIN
Bit Form
CVE-2024-7777
Risk Score
Threat Entry
Updated 2026-06-17
Bit Form - SQL Injection (CVE-2024-7780)
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to generic SQL Injection via the id parameter in versions 2.0 to 2.13.9 due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
PLUGIN
Bit Form
CVE-2024-7780
Risk Score
Threat Entry
Updated 2026-06-17
Bit Form - Security Vulnerability (CVE-2024-7775)
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to arbitrary JavaScript file uploads due to missing input validation in the addCustomCode function in versions 2.0 to 2.13.9. This makes it possible for authenticated attackers, with Administrator-level access and above, to upload arbitrary JavaScript files to the affected site's server.
PLUGIN
Bit Form
CVE-2024-7775
Risk Score
Threat Entry
Updated 2026-06-17
Bit Form - SQL Injection (CVE-2024-7702)
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to generic SQL Injection via the entryID parameter in versions 2.0 to 2.13.9 due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries to already existing queries that can be used to extract sensitive information from the database.
PLUGIN
Bit Form
CVE-2024-7702
Risk Score
Threat Entry
Updated 2026-06-17
Bit Form - Arbitrary File Upload (CVE-2024-43249)
Unrestricted Upload of File with Dangerous Type vulnerability in Bit Apps Bit Form Pro allows Command Injection.This issue affects Bit Form Pro: from n/a through 2.6.4.
PLUGIN
Bit Form
CVE-2024-43249
Risk Score
Threat Entry
Updated 2026-06-17
Bit Form - Path Traversal (CVE-2024-43248)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bit Apps Bit Form Pro allows File Manipulation.This issue affects Bit Form Pro: from n/a through 2.6.4.
PLUGIN
Bit Form
CVE-2024-43248
Risk Score
Threat Entry
Updated 2026-06-17
Bit Form - Broken Access Control (CVE-2024-43250)
Incorrect Authorization vulnerability in Bit Apps Bit Form Pro bitformpro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bit Form Pro: from n/a through 2.6.4.
PLUGIN
Bit Form
CVE-2024-43250
Risk Score
Threat Entry
Updated 2026-06-17
Bit Form - Remote Code Execution (CVE-2024-6123)
The Bit Form plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'iconUpload' function in all versions up to, and including, 2.13.3. This makes it possible for authenticated attackers, with administrator-level and above permissions, to upload arbitrary files on the affected site's server which may make remote code execution possible.
PLUGIN
Bit Form
CVE-2024-6123
Risk Score
Threat Entry
Updated 2026-06-17
Bit Form - Security Vulnerability (CVE-2024-1640)
The Contact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form plugin for WordPress is vulnerable to unauthorized modification of data due to a insufficient user validation on the bitforms_update_form_entry AJAX action in all versions up to, and including, 2.10.1. This makes it possible for unauthenticated attackers to modify form submissions.
PLUGIN
Bit Form
CVE-2024-1640
Risk Score
Threat Entry
Updated 2026-06-17
Bit Form - Remote Code Execution (CVE-2022-4774)
The Bit Form WordPress plugin before 1.9 does not validate the file types uploaded via it's file upload form field, allowing unauthenticated users to upload arbitrary files types such as PHP or HTML files to the server, leading to Remote Code Execution.
PLUGIN
Bit Form
CVE-2022-4774
Risk Score