{"items":[{"id":"CVE-2026-32519","published":"2026-03-25T16:15:06.931Z","updated":"2026-04-29T09:52:00.955Z","title":"WordPress Bit SMTP plugin <= 1.2.2 - Broken Authentication vulnerability","severity":"CRITICAL","score":9,"vendor":"Bit Apps","product":"Bit SMTP","kev":false,"epss":0.00358,"kevAdded":null},{"id":"CVE-2026-25418","published":"2026-02-19T08:27:06.644Z","updated":"2026-04-28T16:14:58.487Z","title":"WordPress Bit Form plugin <= 2.21.10 - SQL Injection vulnerability","severity":"HIGH","score":7.6,"vendor":"Bit Apps","product":"Bit Form","kev":false,"epss":0.00314,"kevAdded":null},{"id":"CVE-2025-68596","published":"2025-12-24T13:10:45.364Z","updated":"2026-11-04T00:15:25.683Z","title":"WordPress Bit Assist plugin <= 1.5.11 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Bit Apps","product":"Bit Assist","kev":false,"epss":0.0027,"kevAdded":null},{"id":"CVE-2025-30834","published":"2025-04-01T05:31:37.848Z","updated":"2026-04-28T16:11:58.633Z","title":"WordPress Bit Assist plugin <= 1.5.4 - Path Traversal vulnerability","severity":"HIGH","score":7.5,"vendor":"Bit Apps","product":"Bit Assist","kev":false,"epss":0.00554,"kevAdded":null},{"id":"CVE-2025-30885","published":"2025-03-27T10:55:42.335Z","updated":"2026-04-28T16:11:59.795Z","title":"WordPress Bit Form plugin <= 2.18.0 - Open Redirection vulnerability","severity":"MEDIUM","score":4.7,"vendor":"Bit Apps","product":"Bit Form","kev":false,"epss":0.00427,"kevAdded":null},{"id":"CVE-2025-30884","published":"2025-03-27T10:55:41.687Z","updated":"2026-04-28T16:11:59.782Z","title":"WordPress Bit Integrations plugin <= 2.4.10 - Open Redirection vulnerability","severity":"MEDIUM","score":4.7,"vendor":"Bit Apps","product":"Bit Integrations","kev":false,"epss":0.00427,"kevAdded":null},{"id":"CVE-2024-47335","published":"2024-10-07T05:31:04.253Z","updated":"2026-05-12T22:52:13.758Z","title":"WordPress Bit Form plugin <= 2.13.11 - SQL Injection vulnerability","severity":"HIGH","score":7.6,"vendor":"Bit Apps","product":"Bit Form","kev":false,"epss":0.00418,"kevAdded":null},{"id":"CVE-2024-47301","published":"2024-10-06T11:35:24.158Z","updated":"2026-04-28T16:10:18.357Z","title":"WordPress Bit Form plugin <= 2.13.10 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Bit Apps","product":"Bit Form","kev":false,"epss":0.0032,"kevAdded":null},{"id":"CVE-2024-47319","published":"2024-10-05T12:30:09.665Z","updated":"2026-04-28T16:10:18.711Z","title":"WordPress Bit Form plugin <= 2.13.10 - Arbitrary File Upload vulnerability","severity":"HIGH","score":8,"vendor":"Bit Apps","product":"Bit Form","kev":false,"epss":0.00435,"kevAdded":null},{"id":"CVE-2024-43251","published":"2024-08-26T20:17:33.661Z","updated":"2026-04-28T16:10:10.382Z","title":"WordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Sensitive Data Exposure vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Bit Apps","product":"Bit Form Pro","kev":false,"epss":0.00418,"kevAdded":null},{"id":"CVE-2024-43250","published":"2024-08-19T17:21:17.541Z","updated":"2026-04-28T16:10:10.338Z","title":"WordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Plugin Settings Change vulnerability","severity":"HIGH","score":7.1,"vendor":"Bit Apps","product":"Bit Form Pro","kev":false,"epss":0.00285,"kevAdded":null},{"id":"CVE-2024-43249","published":"2024-08-19T17:19:07.822Z","updated":"2026-04-28T16:10:10.456Z","title":"WordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Arbitrary File Upload vulnerability","severity":"CRITICAL","score":9.9,"vendor":"Bit Apps","product":"Bit Form Pro","kev":false,"epss":0.01049,"kevAdded":null},{"id":"CVE-2024-43248","published":"2024-08-19T17:17:17.244Z","updated":"2026-04-28T16:10:10.314Z","title":"WordPress Bit Form Pro plugin <= 2.6.4 - Unauthenticated Arbitrary File Deletion vulnerability","severity":"HIGH","score":8.6,"vendor":"Bit Apps","product":"Bit Form Pro","kev":false,"epss":0.0059,"kevAdded":null}]}