Priority LOW 29
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and inc…
CVSS 3.1MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.00409 · Published 2025-01-25 · No fix listed CWE-918
Priority MEDIUM 41
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path vali…
CVSS 3.1HIGH 8.7· Network · High privileges · No interaction · EPSS 0.00915 · Published 2024-08-20 · No fix listed CWE-22
Priority LOW 34
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to generic SQL Injection via the id parameter in versions 2.0…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00506 · Published 2024-08-20 · No fix listed CWE-89
Priority MEDIUM 41
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file…
CVSS 3.1CRITICAL 9.0· Network · High privileges · No interaction · EPSS 0.01025 · Published 2024-08-20 · No fix listed CWE-22
Priority LOW 24
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to arbitrary JavaScript file uploads due to missing input val…
CVSS 3.1MEDIUM 5.5· Network · High privileges · No interaction · EPSS 0.00257 · Published 2024-08-20 · No fix listed CWE-79
Priority LOW 34
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to generic SQL Injection via the entryID parameter in version…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00452 · Published 2024-08-20 · No fix listed CWE-89
Priority LOW 25
The Contact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form plugin for WordPress is vulnerable to unauthorized modification of data due to a insufficient user validation…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00481 · Published 2024-03-13 · No fix listed CWE-639
Priority MEDIUM 55
The Contact Form Builder by Bit Form WordPress plugin before 2.2.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks ev…
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00442 · Published 2023-08-14 · Fixed in 2.2.0