Bit Form – Contact Form Plugin

Unauthenticated Sensitive Information Exposure vulnerability <= 2.17.5

Authenticated (Author+) Stored CrossSite Scripting via SVG File Upload vulnerability <= 2.18.3

Open Redirection vulnerability <= 2.18.0

Authenticated (Administrator+) ServerSide Request Forgery vulnerability <= 2.17.4

Missing Authorization to Authenticated (Subscriber+) Form Submission Disclosure vulnerability <= 2.17.3