PatchTheCVEbit form vulnerabilities and fixes
Recent CVEs affecting bit form, with upgrade or downgrade steps. 5 tracked.
Also searched as: bitform.
bit form has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-07-02. Highest priority: CVE-2024-43249 (score 51/100).
- CVE-2024-43251 MEDIUM 6.5 UPGRADE Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Bit Apps Bit Form Pro.This issue a
- CVE-2024-43250 HIGH 7.1 UPGRADE Incorrect Authorization vulnerability in Bit Apps Bit Form Pro bitformpro allows Accessing Functionality Not P
- CVE-2024-43249 CRITICAL 9.9 UPGRADE Unrestricted Upload of File with Dangerous Type vulnerability in Bit Apps Bit Form Pro allows Command Injectio
- CVE-2024-43248 HIGH 8.6 UPGRADE Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bit Apps Bit F
- CVE-2024-13451 MEDIUM 5.3 UPGRADE The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact
FAQ
How do I fix bit form vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bit form being exploited right now?
None of the tracked bit form CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bit form CVE should I patch first?
CVE-2024-43249 currently ranks highest (51/100): Unrestricted Upload of File with Dangerous Type vulnerability in Bit Apps Bit Form Pro allows Command Injectio.