Extension WordPress
Vulnérabilités Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder
Cette page rassemble les failles publiées pour Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder
22 fiches
Bit Form <= 3.1.1 – Authenticated (Subscriber+) Arbitrary File Deletion via '_old' Parameter
The Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteFiles function in all versions…
*-3.1.1
3.1.2
08/07/2026
Bit Form <= 2.21.10 – Authenticated (Administrator+) SQL Injection
The Bit Form plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 2.21.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This…
*-2.21.10
2.21.11
28/01/2026
Bit Form – Contact Form Plugin <= 2.21.6 – Missing Authorization to Unauthenticated Workflow Replay
The Bit Form – Contact Form Plugin plugin for WordPress is vulnerable to unauthorized workflow execution due to missing authorization in the triggerWorkFlow function in all versions up to, and including, 2.21.6. This is due to a logic…
*-2.21.6
2.21.7
06/01/2026
Contact Form by Bit Form – Bit Form <= 2.20.3 – Unauthenticated Arbitrary File Upload
The Bit Form builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 2.20.4. This makes it possible for unauthenticated attackers to upload arbitrary files…
*-2.20.3
2.20.4
14/08/2025
Contact Form by Bit Form <= 2.17.5 – Unauthenticated Sensitive Information Exposure
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.17.4 via…
*-2.17.5
2.17.6
01/07/2025
Contact Form by Bit Form <= 2.18.3 – Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
The Contact Form by Bit Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.18.3 due to insufficient input sanitization and output escaping. This makes it…
*-2.18.3
2.18.4
24/04/2025
Bit Form – Contact Form Plugin <= 2.18.0 – Open Redirect
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 2.18.0. This is…
*-2.18.0
2.18.1
27/03/2025
Contact Form by Bit Form <= 2.17.4 – Authenticated (Administrator+) Server-Side Request Forgery
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.17.4 via…
*-2.17.4
2.17.5
24/01/2025
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.17.3 – Missing Authorization to Authenticated (Subscriber+) Form Submission Disclosure
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the…
*-2.17.3
2.17.4
24/12/2024
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.15.2 – Authenticated (Administrator+) Improper Input Validation via iconUpload Function to Arbitrary File Read
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 2.15.2 due…
*-2.15.2
2.15.3
10/10/2024
Bit Form – Contact Form Plugin <= 2.13.11 – Authenticated (Administrator+) SQL Injection
The Bit Form – Contact Form Plugin plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 2.13.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the…
*-2.13.11
2.13.12
26/09/2024
Bit Form – Contact Form Plugin <= 2.13.10 – Authenticated (Administrator+) Arbitrary File Upload
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions…
*-2.13.10
2.13.11
25/09/2024
Bit Form – Contact Form Plugin <= 2.13.10 – Unauthenticated Stored Cross-Site Scripting
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.13.10 due…
*-2.13.10
2.13.11
24/09/2024
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 – 2.13.9 – Authenticated (Administrator+) SQL Injection via getLogHistory Function
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to generic SQL Injection via the entryID parameter in versions 2.0 to 2.13.9…
2.0-2.13.9
2.13.10
19/08/2024
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 – 2.13.9 – Authenticated (Administrator+) Arbitrary JavaScript File Uploads
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to arbitrary JavaScript file uploads due to missing input validation in the addCustomCode…
2.0-2.13.9
2.13.10
19/08/2024
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 – 2.13.9 – Authenticated (Administrator+) Arbitrary File Read And Deletion
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file path validation in…
2.0-2.13.9
2.13.10
19/08/2024
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 – 2.13.9 – Authenticated (Administrator+) SQL Injection
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to generic SQL Injection via the id parameter in versions 2.0 to 2.13.9…
2.0-2.13.9
2.13.10
19/08/2024
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 – 2.13.4 – Authenticater (Administrator+) Arbitrary File Deletion
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the iconRemove…
2.0-2.13.4
2.13.5
19/08/2024
Bit Form <= 2.13.3 – Authenticated (Administrator+) Arbitrary File Upload
The Bit Form plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'iconUpload' function in all versions up to, and including, 2.13.3. This makes it possible for authenticated attackers, with…
*-2.13.3
2.13.4
08/07/2024
Contact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form <= 2.10.1 – Unauthenticated Insecure Direct Object Reference to Form Submission Alteration
The Contact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form plugin for WordPress is vulnerable to unauthorized modification of data due to a insufficient user validation on the bitforms_update_form_entry AJAX…
*-2.10.1
2.10.2
13/03/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.