Known vulnerabilities in Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder
Contact Form Builder for WordPress with payment forms, multistep forms, conversational forms, conditional logic, and integrations.
27Reported vulnerabilities
9.8Highest CVSS score
3.2.2Latest version
10,000+Active installs
What to do now
Update Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder to 3.2.1 or later.
27 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| CVE-2022-4774 | Critical | 1.8% | Before 1.9 | 1.9 |
May 15, 2023 |
| CVE-2025-6679 | Critical | 0.8% | 0 to 2.20.3 (inclusive) | 2.20.4 |
August 15, 2025 |
| CVE-2024-7777 | Critical | 1.0% | 2.0.0 up to (but not including) 2.13.10 | 2.13.10 |
August 20, 2024 |
| CVE-2026-14372 | High | 1.1% | 0 to 3.1.1 (inclusive) | 3.1.2 |
July 9, 2026 |
| CVE-2026-13693 | High | 0.4% | 3.0.0 and earlier | 3.1.0 |
June 30, 2026 |
| CVE-2024-13451 | High | 0.3% | 0 to 2.17.5 (inclusive) | 2.17.6 |
July 2, 2025 |
| CVE-2024-6123 | High | 1.0% | 0 to 2.13.3 (inclusive) 0 to 2.12.2 (inclusive) |
2.13.4 |
July 9, 2024 |
| CVE-2026-16573 | High | 0.3% | 3.1.0 and earlier | 3.2.0 |
July 27, 2026 |
| CVE-2025-30885 | High | 0.4% | 2.18.0 and earlier | 2.18.1 |
March 27, 2025 |
| CVE-2024-47319 | High | 0.4% | 2.13.10 and earlier | 2.13.11 |
September 25, 2024 |
| CVE-2024-47301 | High | 0.3% | 2.13.10 and earlier | 2.13.11 |
September 24, 2024 |
| CVE-2024-7780 | High | 0.5% | 2.0.0 up to (but not including) 2.13.10 | 2.13.10 |
August 20, 2024 |
| CVE-2024-7702 | High | 0.5% | 2.0.0 up to (but not including) 2.13.10 | 2.13.10 |
August 20, 2024 |
| CVE-2024-7782 | Medium | 0.9% | 2.0.0 up to (but not including) 2.13.5 | 2.13.5 |
August 20, 2024 |
| CVE-2026-16810 | Medium | 0.3% | 0 to 3.2.0 (inclusive) | 3.2.1 |
August 14, 2026 |
| CVE-2025-14901 | Medium | 0.4% | 0 to 2.21.6 (inclusive) | 2.21.7 |
January 7, 2026 |
| CVE-2024-13450 | Medium | 0.4% | Before 2.17.5 | 2.17.5 |
January 25, 2025 |
| CVE-2026-15054 | Medium | 0.2% | Before 3.1.2 | 3.1.2 |
July 30, 2026 |
| CVE-2026-13694 | Medium | 0.3% | 3.0.0 and earlier | 3.1.0 |
June 30, 2026 |
| CVE-2024-1640 | Medium | 0.5% | Before 2.10.2 | 2.10.2 |
March 13, 2024 |
| CVE-2024-9507 | Medium | 0.5% | 0 to 2.15.2 (inclusive) | 2.15.3 |
October 11, 2024 |
| CVE-2026-25418 | Medium | 0.3% | 2.21.10 and earlier | 2.21.11 |
January 28, 2026 |
| CVE-2025-2580 | Medium | 0.3% | 0 to 2.18.3 (inclusive) | 2.18.4 |
April 25, 2025 |
| CVE-2024-47335 | Medium | 0.4% | 2.13.11 and earlier | 2.13.12 |
September 26, 2024 |
| CVE-2024-7775 | Medium | 0.3% | 2.0.0 up to (but not including) 2.13.10 | 2.13.10 |
August 20, 2024 |
| CVE-2025-15669 | Medium | 0.2% | Before 3.1.4 | 3.1.4 |
August 1, 2026 |
| CVE-2024-12190 | Medium | 0.4% | 0 to 2.17.3 (inclusive) | 2.17.4 |
December 25, 2024 |