Approved changes feed: RSS · Atom

cpe:2.3:a:bit_apps:bit_form:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBit Apps (63441227-0875-5b38-b2a3-ae7c1c33c350)
ProductBit Form (d50dcceb-7889-58ff-88f2-72f5f8749804)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-25418 vulnerable 2026-06-08 07:53:19.788892 WordPress Bit Form plugin <= 2.21.10 - SQL Injection vulnerability
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bit Apps Bit Form bit-form allows SQL Injection.This issue affects Bit Form: from n/a through <= 2.21.10.
Published: 2026-02-19T08:27:06.644Z
Updated: 2026-04-28T16:14:58.487Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30885 vulnerable 2026-06-08 07:17:01.987419 WordPress Bit Form plugin <= 2.18.0 - Open Redirection vulnerability
MEDIUM (4.7)
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Bit Apps Bit Form bit-form allows Phishing.This issue affects Bit Form: from n/a through <= 2.18.0.
Published: 2025-03-27T10:55:42.335Z
Updated: 2026-04-28T16:11:59.795Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47335 vulnerable 2026-06-08 06:48:11.798971 WordPress Bit Form plugin <= 2.13.11 - SQL Injection vulnerability
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bit Apps Bit Form bit-form allows SQL Injection.This issue affects Bit Form: from n/a through <= 2.13.11.
Published: 2024-10-07T05:31:04.253Z
Updated: 2026-05-12T22:52:13.758Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47319 vulnerable 2026-06-08 06:48:11.765760 WordPress Bit Form plugin <= 2.13.10 - Arbitrary File Upload vulnerability
HIGH (8)
Unrestricted Upload of File with Dangerous Type vulnerability in Bit Apps Bit Form bit-form.This issue affects Bit Form: from n/a through <= 2.13.10.
Published: 2024-10-05T12:30:09.665Z
Updated: 2026-04-28T16:10:18.711Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47301 vulnerable 2026-06-08 06:48:11.726904 WordPress Bit Form plugin <= 2.13.10 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bit Apps Bit Form bit-form allows Stored XSS.This issue affects Bit Form: from n/a through <= 2.13.10.
Published: 2024-10-06T11:35:24.158Z
Updated: 2026-04-28T16:10:18.357Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.