Read the docs

bitpressadmin

Records48All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high19CVSS 7.0–8.9

Exploited now

bitpressadmin records in CISA KEV

No bitpressadmin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Contact Form Builder 8 records MEDIUM Bit Form 6 records HIGH Bit Assist 5 records MEDIUM File Manager 4 records MEDIUM

Records

4 records in File Manager · all components

TI-2023-05439 CVE-2023-5907 · GHSA-hmhp-m9p3-px6r

File Manager < 6.3 - Admin+ Arbitrary OS File/Folder Access + Path Traversal

Priority MEDIUM 64

The File Manager WordPress plugin before 6.3 does not restrict the file managers root directory, allowing an administrator to set a root outside of the WordPress root directory, giving access to system files and director…

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.0085 Published 2023-12-11 Fixed in 6.3 CWE-552
TI-2024-07204 CVE-2024-7770 · GHSA-r9w3-4w3v-h5x6

Unrestricted file upload in bitpressadmin File Manager

Priority MEDIUM 42

The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload' function in all v…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01067 Published 2024-09-10 No fix listed CWE-434
TI-2022-23637 CVE-2022-47599 · GHSA-f3q2-gmqc-c2g2

WordPress File Manager Plugin <= 5.2.7 is vulnerable to PHP Object Injection

Priority LOW 32

Deserialization of Untrusted Data vulnerability in File Manager by Bit Form Team File Manager – 100% Free & Open Source File Manager Plugin for WordPress | Bit File Manager.This issue affects File Manager – 100% Free & O…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00516 Published 2023-12-20 No fix listed CWE-502
Open these records in search →