Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Bit Form 3.1.0 Clear all filters
TI-2026-11545 CVE-2026-13694 · GHSA-xfxr-j75f-v7p4

Bit Form < 3.1.0 - Unauthenticated Workflow Trigger via Authentication Bypass

Priority LOW 35

The Bit Form WordPress plugin before 3.1.0 does not properly validate its workflow-trigger token once the associated transient has expired, allowing unauthenticated attackers to re-trigger a form's configured workflow ac…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00343 Published 2026-07-21 Fixed in 3.1.0 CWE-862
TI-2026-11544 CVE-2026-13693 · GHSA-3cgv-fv99-x54w

Bit Form < 3.1.0 - Unauthenticated Arbitrary File Read via Path Traversal

Priority MEDIUM 60

The Bit Form WordPress plugin before 3.1.0 does not restrict a form file-field value to a safe path before reading the file and attaching it to a notification email, allowing unauthenticated attackers to read arbitrary s…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00404 Published 2026-07-21 Fixed in 3.1.0 CWE-22