Vulnerabilities > Bitapps > High

DATE CVE VULNERABILITY TITLE RISK
2024-09-10 CVE-2024-7770 Unrestricted Upload of File with Dangerous Type vulnerability in Bitapps File Manager
The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload' function in all versions up to, and including, 6.5.5.
network
low complexity
bitapps CWE-434
8.8
2024-09-05 CVE-2024-7627 Race Condition vulnerability in Bitapps File Manager
The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'checkSyntax' function.
network
high complexity
bitapps CWE-362
8.1
2024-08-20 CVE-2024-7702 SQL Injection vulnerability in Bitapps Contact Form Builder
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to generic SQL Injection via the entryID parameter in versions 2.0 to 2.13.9 due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query.
network
low complexity
bitapps CWE-89
7.2
2024-08-20 CVE-2024-7780 SQL Injection vulnerability in Bitapps Contact Form Builder
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to generic SQL Injection via the id parameter in versions 2.0 to 2.13.9 due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query.
network
low complexity
bitapps CWE-89
7.2
2024-08-19 CVE-2024-43249 Unrestricted Upload of File with Dangerous Type vulnerability in Bitapps BIT Form
Unrestricted Upload of File with Dangerous Type vulnerability in Bit Apps Bit Form Pro allows Command Injection.This issue affects Bit Form Pro: from n/a through 2.6.4.
network
low complexity
bitapps CWE-434
8.8
2023-12-20 CVE-2022-47599 Deserialization of Untrusted Data vulnerability in Bitapps File Manager
Deserialization of Untrusted Data vulnerability in File Manager by Bit Form Team File Manager – 100% Free & Open Source File Manager Plugin for WordPress | Bit File Manager.This issue affects File Manager – 100% Free & Open Source File Manager Plugin for WordPress | Bit File Manager: from n/a through 5.2.7.
network
low complexity
bitapps CWE-502
7.2