Bit Form – Contact Form Plugin

Authenticated (Author+) Stored CrossSite Scripting via SVG File Upload vulnerability <= 2.18.3

Open Redirection vulnerability <= 2.18.0

Authenticated (Administrator+) ServerSide Request Forgery vulnerability <= 2.17.4

Missing Authorization to Authenticated (Subscriber+) Form Submission Disclosure vulnerability <= 2.17.3

Authenticated (Administrator+) Improper Input Validation to Arbitrary File Read vulnerability <= 2.15.2