https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-13451.htmlhttps://patchthecve.com/cve/CVE-2024-13451.htmlWed, 17 Jun 2026 07:02:02 +0000MEDIUM 5.3: The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.17.4 via file uploads due to insufficient directory listing preventhttps://patchthecve.com/cve/CVE-2024-43251.htmlhttps://patchthecve.com/cve/CVE-2024-43251.htmlWed, 17 Jun 2026 07:50:40 +0000MEDIUM 6.5: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Bit Apps Bit Form Pro.This issue affects Bit Form Pro: from n/a through 2.6.4.https://patchthecve.com/cve/CVE-2024-43250.htmlhttps://patchthecve.com/cve/CVE-2024-43250.htmlWed, 17 Jun 2026 07:50:40 +0000HIGH 7.1: Incorrect Authorization vulnerability in Bit Apps Bit Form Pro bitformpro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bit Form Pro: from n/a through 2.6.4.https://patchthecve.com/cve/CVE-2024-43249.htmlhttps://patchthecve.com/cve/CVE-2024-43249.htmlWed, 17 Jun 2026 07:50:40 +0000CRITICAL 9.9: Unrestricted Upload of File with Dangerous Type vulnerability in Bit Apps Bit Form Pro allows Command Injection.This issue affects Bit Form Pro: from n/a through 2.6.4.https://patchthecve.com/cve/CVE-2024-43248.htmlhttps://patchthecve.com/cve/CVE-2024-43248.htmlWed, 17 Jun 2026 07:50:40 +0000HIGH 8.6: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bit Apps Bit Form Pro allows File Manipulation.This issue affects Bit Form Pro: from n/a through 2.6.4.