bitapps vulnerabilities
Recent CVEs affecting bitapps products. 8 tracked.
bitapps has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 8. Most recent: 2025-07-02. Highest priority: CVE-2024-7627 (score 55/100).
- CVE-2025-0822 MEDIUM 6.5 UPGRADE Bit Assist plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.2 vi
- CVE-2025-0821 MEDIUM 6.5 UPGRADE Bit Assist plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versio
- CVE-2024-7770 HIGH 8.8 UPGRADE The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress
- CVE-2024-7627 HIGH 8.1 UPGRADE The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via
- CVE-2024-43251 MEDIUM 6.5 UPGRADE Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Bit Apps Bit Form Pro.This issue a
- CVE-2024-13791 MEDIUM 4.9 UPGRADE Bit Assist plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.2 vi
- CVE-2024-13451 MEDIUM 5.3 UPGRADE The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact
- CVE-2024-13450 LOW 3.8 UPGRADE The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact
FAQ
How do I fix bitapps vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bitapps being exploited right now?
None of the tracked bitapps CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bitapps CVE should I patch first?
CVE-2024-7627 currently ranks highest (55/100): The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via .