# cve.now: Bitpressadmin

The newest entries naming Bitpressadmin as an affected vendor (up to 200), of 29 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-110185](https://cve.now/CVE-2026-110185.md): Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More \<= 1.31.0 - Unauthenticated Local File Inclusion via 'webhook' and 'body' Parameters (CVSS 5.9)
- [CVE-2026-104749](https://cve.now/CVE-2026-104749.md): Bit integrations \<= 2.10.6 - Unauthenticated Privilege Escalation via Identity-Confused Log Re-execution to Account Takeover via Log Re-execution of Anonymous-Captured Field Data (CVSS 7.5)
- [CVE-2026-102007](https://cve.now/CVE-2026-102007.md): Bit integrations \<= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via 'notification\_content' Field via Public Bit Assist Webhook Callback (CVSS 7.2)
- [CVE-2026-16810](https://cve.now/CVE-2026-16810.md): Bit Form \<= 3.2.0 - Authenticated (Administrator+) SQL Injection via 'filterText' Parameter (CVSS 6.5)
- [CVE-2026-15991](https://cve.now/CVE-2026-15991.md): File Manager 6.0 - 6.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read and Deletion via 'cmd' Query Parameter (CVSS 8.8)
- [CVE-2026-15006](https://cve.now/CVE-2026-15006.md): Bit integrations \<= 2.9.0 - Unauthenticated Arbitrary File Read via Optional CF7 File Field (CVSS 7.5)
- [CVE-2026-14372](https://cve.now/CVE-2026-14372.md): Bit Form \<= 3.1.1 - Authenticated (Subscriber+) Arbitrary File Deletion via '\_old' Parameter (CVSS 7.1)
- [CVE-2026-11989](https://cve.now/CVE-2026-11989.md): Bit integrations \<= 2.8.7 - Unauthenticated Server-Side Request Forgery via Form Field Upload Mapping (CVSS 6.5)
- [CVE-2025-14901](https://cve.now/CVE-2025-14901.md): Bit Form – Contact Form Plugin \<= 2.21.6 - Missing Authorization to Unauthenticated Workflow Replay (CVSS 6.5)
- [CVE-2025-6679](https://cve.now/CVE-2025-6679.md): Contact Form by Bit Form - Bit Form \<= 2.20.3 - Unauthenticated Arbitrary File Upload (CVSS 9.8)
- [CVE-2024-13451](https://cve.now/CVE-2024-13451.md): Contact Form by Bit Form \<= 2.17.5 - Unauthenticated Sensitive Information Exposure (CVSS 5.3)
- [CVE-2025-1725](https://cve.now/CVE-2025-1725.md): Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress \<= 6.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Uploads (CVSS 6.4)
- [CVE-2025-2580](https://cve.now/CVE-2025-2580.md): Contact Form by Bit Form \<= 2.18.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload (CVSS 4.9)
- [CVE-2025-0822](https://cve.now/CVE-2025-0822.md): Bit Assist \<= 1.5.2 - Path Traversal to Authenticated (Subscriber+) Arbitrary File Read via fileID Parameter (CVSS 6.5)
- [CVE-2025-0821](https://cve.now/CVE-2025-0821.md): Bit Assist \<= 1.5.2 - Authenticated (Subscriber+) SQL Injection via id Parameter (CVSS 6.5)
- [CVE-2024-13791](https://cve.now/CVE-2024-13791.md): Bit Assist \<= 1.5.2 - Path Traversal to Authenticated (Administrator+) Arbitrary File Read via downloadResponseFile Function (CVSS 4.9)
- [CVE-2024-13450](https://cve.now/CVE-2024-13450.md): Contact Form by Bit Form \<= 2.17.4 - Authenticated (Administrator+) Server-Side Request Forgery (CVSS 3.8)
- [CVE-2024-12190](https://cve.now/CVE-2024-12190.md): Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder \<= 2.17.3 - Missing Authorization to Authenticated (Subscriber+) Form Submission Disclosure (CVSS 4.3)
- [CVE-2024-9507](https://cve.now/CVE-2024-9507.md): Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder \<= 2.15.2 - Authenticated (Administrator+) Improper Input Validation via iconUpload Function to Arbitrary File Read (CVSS 4.9)
- [CVE-2024-8743](https://cve.now/CVE-2024-8743.md): Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress \<= 6.5.7 - Authenticated (Subscriber+) Limited JavaScript File Upload (CVSS 6.8)
- [CVE-2024-7770](https://cve.now/CVE-2024-7770.md): Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress \<= 6.5.5 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 8.8)
- [CVE-2024-7627](https://cve.now/CVE-2024-7627.md): Bit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race Condition (CVSS 8.1)
- [CVE-2024-7782](https://cve.now/CVE-2024-7782.md): Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.4 - Authenticater (Administrator+) Arbitrary File Deletion (CVSS 8.7)
- [CVE-2024-7780](https://cve.now/CVE-2024-7780.md): Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection (CVSS 7.2)
- [CVE-2024-7777](https://cve.now/CVE-2024-7777.md): Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary File Read And Deletion (CVSS 9.0)
- [CVE-2024-7775](https://cve.now/CVE-2024-7775.md): Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary JavaScript File Uploads (CVSS 5.5)
- [CVE-2024-7702](https://cve.now/CVE-2024-7702.md): Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection via getLogHistory Function (CVSS 7.2)
- [CVE-2024-6123](https://cve.now/CVE-2024-6123.md): Bit Form \<= 2.13.3 - Authenticated (Administrator+) Arbitrary File Upload (CVSS 7.2)
- [CVE-2024-1640](https://cve.now/CVE-2024-1640.md): Contact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form \<= 2.10.1 - Unauthenticated Insecure Direct Object Reference to Form Submission Alteration (CVSS 5.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/bitpressadmin
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.