| CVE-2026-16573 |
The Bit Form WordPress plugin before 3.2.0 does not sanitize an uploaded signature image before storing it, allowing…
|
7.5
High
|
Aug 5, 2026 |
| CVE-2025-15669 |
The Bit Form WordPress plugin before 3.1.4 does not sanitise one of its conversational-form display settings before…
|
4.8
Medium
|
Aug 1, 2026 |
| CVE-2026-15054 |
The Bit Form WordPress plugin before 3.1.2 does not enforce a form's active/published status on its public…
|
3.7
Low
|
Jul 30, 2026 |
| CVE-2026-13693 |
The Bit Form WordPress plugin before 3.1.0 does not restrict a form file-field value to a safe path before reading…
|
5.9
Medium
|
Jul 21, 2026 |
| CVE-2026-13694 |
The Bit Form WordPress plugin before 3.1.0 does not properly validate its workflow-trigger token once the associated…
|
6.5
Medium
|
Jul 21, 2026 |
| CVE-2022-4774 |
The Bit Form WordPress plugin before 1.9 does not validate the file types uploaded via it's file upload form field,…
|
9.8
Critical
|
May 15, 2023 |