Bitapps vulnerabilities, page 2

23 vulnerabilities

Known vulnerabilities in Bitapps products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 4 products.

6.5CVE-2023-5907bitappsfile_manager+2
EPSS score
0.85%
The File Manager WordPress plugin before 6.3 does not restrict the file managers root directory, allowing an administrator to set a root outside of the WordPress root directory, giving access to system files and directories even in a multisite setup, where site administrators should not be allowed to modify the sites files.4.8CVE-2023-3667bitappsbit_assist+2
EPSS score
0.44%
The Bit Assist WordPress plugin before 1.1.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)4.8CVE-2023-3645bitappscontact_form_builder+2
EPSS score
0.44%
The Contact Form Builder by Bit Form WordPress plugin before 2.2.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)