Bit Form – Contact Form Plugin

Open Redirection vulnerability <= 2.18.0

Authenticated (Administrator+) ServerSide Request Forgery vulnerability <= 2.17.4

Missing Authorization to Authenticated (Subscriber+) Form Submission Disclosure vulnerability <= 2.17.3

Authenticated (Administrator+) Improper Input Validation to Arbitrary File Read vulnerability <= 2.15.2

SQL Injection vulnerability <= 2.13.11