Extension WordPress

Vulnérabilités Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder, page 2

Cette page rassemble les failles publiées pour Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder, leurs plages de versions affectées et les correctifs signalés dans la base locale.

22Vulnérabilités
3Critiques
22Avec correctif
9,8CVSS maximal

Historique de sécurité

CVE et vulnérabilités de Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder

22 fiches

CVE-2023-3645 Moyenne · 4,4
Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder

Contact Form Builder by Bit Form <= 2.1.0 – Authenticated (Admin+) Stored Cross-Site Scripting

The Contact Form Builder by Bit Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.1.0 due to insufficient input sanitization and output escaping. This makes it possible…

Versions affectées

*-2.1.0

Correctif

2.2.0

Publication

24/07/2023

CVE-2022-4774 Critique · 9,8
Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder

Bit Form <= 1.8.1 – Unauthenticated Arbitrary File Upload to Remote Code Execution

The Bit Form plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the saveFormEntry function in versions up to, and including, 1.8.1. This makes it possible for unauthenticated attackers to upload…

Versions affectées

*-1.8.1

Correctif

1.9

Publication

19/04/2023

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités