Vulnerabilities / Bit Form
Bit Form vulnerabilities
Advisories WPSec published for Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder. Other sources may list more. Its attack surface: Bit Form on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-23 | WPSEC-2026-1517 | Bit Form <= 3.3.1 - Authenticated (Subscriber+) Arbitrary File Deletion via Entry Editing 'entryID' Parameter | Medium 6.8 | 3.4.0 |
| 2026-10-23 | WPSEC-2026-1516 | Bit Form <= 3.3.1 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload | High 7.2 | 3.4.0 |
License: CC BY 4.0