Bit Apps vulnerabilities and threats

13 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.0	EPSS 0.4%	CVE-2026-32519Bit SMTP (WordPress plugin) · Incorrect Privilege Assignment Critical9.0EPSS 0.4%2026-03-25CVE Database V5CVE-2026-32519 Incorrect Privilege Assignment vulnerability in Bit Apps Bit SMTP bit-smtp allows Privilege Escalation.This issue affects Bit SMTP: from n/a through <= 1.2.2. EPSS 0.4%Vulnerability Bit Apps	CVE Database V5	2026-03-25
High	7.6	EPSS 0.3%	CVE-2026-25418Bit Form (WordPress plugin) · SQL Injection High7.6EPSS 0.3%2026-02-19CVE Database V5CVE-2026-25418 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bit Apps Bit Form bit-form allows SQL Injection.This issue affects Bit Form: from n/a through <= 2.21.10. EPSS 0.3%Vulnerability Bit Apps	CVE Database V5	2026-02-19
Medium	5.3	EPSS 0.3%	CVE-2025-68596Bit Assist (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.3%2025-12-24CVE Database V5CVE-2025-68596 Missing Authorization vulnerability in Bit Apps Bit Assist bit-assist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bit Assist: from n/a through <= 1.5.11. EPSS 0.3%Vulnerability Bit Apps	CVE Database V5	2025-12-24
High	7.5	EPSS 0.6%	CVE-2025-30834Bit Assist (WordPress plugin) · Path Traversal: '.../...// High7.5EPSS 0.6%2025-04-01CVE Database V5CVE-2025-30834 Path Traversal: '.../...//' vulnerability in Bit Apps Bit Assist bit-assist allows Path Traversal.This issue affects Bit Assist: from n/a through <= 1.5.4. EPSS 0.6%Vulnerability Bit Apps	CVE Database V5	2025-04-01
Medium	4.7	EPSS 0.4%	CVE-2025-30885Bit Form (WordPress plugin) · Open Redirect Medium4.7EPSS 0.4%2025-03-27CVE Database V5CVE-2025-30885 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Bit Apps Bit Form bit-form allows Phishing.This issue affects Bit Form: from n/a through <= 2.18.0. EPSS 0.4%Vulnerability Bit Apps	CVE Database V5	2025-03-27
Medium	4.7	EPSS 0.4%	CVE-2025-30884Bit Integrations (WordPress plugin) · Open Redirect Medium4.7EPSS 0.4%2025-03-27CVE Database V5CVE-2025-30884 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Bit Apps Bit Integrations bit-integrations allows Phishing.This issue affects Bit Integrations: from n/a through <= 2.4.10. EPSS 0.4%Vulnerability Bit Apps	CVE Database V5	2025-03-27
High	7.6	EPSS 0.4%	CVE-2024-47335Bit Form (WordPress plugin) · SQL Injection High7.6EPSS 0.4%2024-10-07CVE Database V5CVE-2024-47335 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bit Apps Bit Form bit-form allows SQL Injection.This issue affects Bit Form: from n/a through <= 2.13.11. EPSS 0.4%Vulnerability Bit Apps	CVE Database V5	2024-10-07
High	7.1	EPSS 0.3%	CVE-2024-47301Bit Form (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2024-10-06CVE Database V5CVE-2024-47301 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bit Apps Bit Form bit-form allows Stored XSS.This issue affects Bit Form: from n/a through <= 2.13.10. EPSS 0.3%Vulnerability Bit Apps	CVE Database V5	2024-10-06
High	8.0	EPSS 0.4%	CVE-2024-47319Bit Form (WordPress plugin) · Unrestricted File Upload High8.0EPSS 0.4%2024-10-05CVE Database V5CVE-2024-47319 Unrestricted Upload of File with Dangerous Type vulnerability in Bit Apps Bit Form bit-form.This issue affects Bit Form: from n/a through <= 2.13.10. EPSS 0.4%Vulnerability Bit Apps	CVE Database V5	2024-10-05
Medium	6.5	EPSS 0.4%	CVE-2024-43251Bit Form Pro (WordPress plugin) · Information Exposure Medium6.5EPSS 0.4%2024-08-26CVE Database V5CVE-2024-43251 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Bit Apps Bit Form Pro.This issue affects Bit Form Pro: from n/a through 2.6.4. EPSS 0.4%Vulnerability Bit Apps CWE-200	CVE Database V5	2024-08-26
High	7.1	EPSS 0.3%	CVE-2024-43250Bit Form Pro (WordPress plugin) · Incorrect Authorization High7.1EPSS 0.3%2024-08-19CVE Database V5CVE-2024-43250 Incorrect Authorization vulnerability in Bit Apps Bit Form Pro bitformpro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bit Form Pro: from n/a through 2.6.4. EPSS 0.3%Vulnerability Bit Apps CWE-863	CVE Database V5	2024-08-19
Critical	9.9	EPSS 1.0%	CVE-2024-43249Bit Form Pro (WordPress plugin) · Unrestricted File Upload Critical9.9EPSS 1.0%2024-08-19CVE Database V5CVE-2024-43249 Unrestricted Upload of File with Dangerous Type vulnerability in Bit Apps Bit Form Pro allows Command Injection.This issue affects Bit Form Pro: from n/a through 2.6.4. EPSS 1.0%Vulnerability Bit Apps CWE-434	CVE Database V5	2024-08-19
High	8.6	EPSS 0.6%	CVE-2024-43248Bit Form Pro (WordPress plugin) · Path Traversal High8.6EPSS 0.6%2024-08-19CVE Database V5CVE-2024-43248 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bit Apps Bit Form Pro allows File Manipulation.This issue affects Bit Form Pro: from n/a through 2.6.4. EPSS 0.6%Vulnerability Bit Apps CWE-22	CVE Database V5	2024-08-19

Page 1 of 1