Vulnerabilidades en Bit Apps
13 resultadosAnálisis Vexday
Bit Apps registra 13 vulnerabilidades catalogadas, das quais 2 são críticas, sem evidência atual de exploração em campo (KEV negativo). A fraqueza dominante é upload de arquivo sem validação adequada (CWE-434), típica de aplicações web mal securizadas. O portfólio não apresenta publicações recentes, sugerindo risco estabilizado, mas o volume moderado associado à natureza das vulnerabilidades recomenda atenção em ambientes de produção.
CVE-2024-43249CRITICALWordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Arbitrary File Upload vulnerabilityEPSS 1.0%CVE-2024-43248HIGHWordPress Bit Form Pro plugin <= 2.6.4 - Unauthenticated Arbitrary File Deletion vulnerabilityEPSS 0.6%CVE-2025-30834HIGHWordPress Bit Assist plugin <= 1.5.4 - Path Traversal vulnerabilityEPSS 0.5%CVE-2024-47319HIGHWordPress Bit Form plugin <= 2.13.10 - Arbitrary File Upload vulnerabilityEPSS 0.4%CVE-2024-47335HIGHWordPress Bit Form plugin <= 2.13.11 - SQL Injection vulnerabilityEPSS 0.4%CVE-2024-43251MEDIUMWordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Sensitive Data Exposure vulnerabilityEPSS 0.4%CVE-2025-30884MEDIUMWordPress Bit Integrations plugin <= 2.4.10 - Open Redirection vulnerabilityEPSS 0.4%CVE-2025-30885MEDIUMWordPress Bit Form plugin <= 2.18.0 - Open Redirection vulnerabilityEPSS 0.4%CVE-2026-32519CRITICALWordPress Bit SMTP plugin <= 1.2.2 - Broken Authentication vulnerabilityEPSS 0.3%CVE-2024-47301HIGHWordPress Bit Form plugin <= 2.13.10 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-43250HIGHWordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Plugin Settings Change vulnerabilityEPSS 0.3%CVE-2026-25418HIGHWordPress Bit Form plugin <= 2.21.10 - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-68596MEDIUMWordPress Bit Assist plugin <= 1.5.11 - Broken Access Control vulnerabilityEPSS 0.3%