Bit Form – Contact Form Plugin

Authenticated (Administrator+) ServerSide Request Forgery vulnerability <= 2.17.4

Missing Authorization to Authenticated (Subscriber+) Form Submission Disclosure vulnerability <= 2.17.3

Authenticated (Administrator+) Improper Input Validation to Arbitrary File Read vulnerability <= 2.15.2

SQL Injection vulnerability <= 2.13.11

Arbitrary File Upload vulnerability <= 2.13.10