WordPress plugin
Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 5 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High4
- Medium1
- Low0
All Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.5 | Unauthenticated Privilege Escalation via Identity-Confused Log Re-execution to Account Takeover via Log Re-execution of Anonymous-Captured Field Data ≤2.10.6Update to 2.10.7 | CVE-2026-104749 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting via 'notification_content' Field via Public Bit Assist Webhook Callback ≤2.10.6Update to 2.10.7 | CVE-2026-102007 | |
| High7.5 | Unauthenticated Arbitrary File Read via Optional CF7 File Field ≤2.9.0Update to 2.9.1 | CVE-2026-15006 | |
| Medium6.5 | Unauthenticated Server-Side Request Forgery via Form Field Upload Mapping ≤2.8.7Update to 2.8.8 | CVE-2026-11989 | |
| High7.2 | Open Redirect ≤2.4.10Update to 2.5.0 | CVE-2025-30884 |
- High7.5Unauthenticated Privilege Escalation via Identity-Confused Log Re-execution to Account Takeover via Log Re-execution of Anonymous-Captured Field Data
≤2.10.6Update to 2.10.7
- High7.2Unauthenticated Stored Cross-Site Scripting via 'notification_content' Field via Public Bit Assist Webhook Callback
≤2.10.6Update to 2.10.7
- High7.5Unauthenticated Arbitrary File Read via Optional CF7 File Field
≤2.9.0Update to 2.9.1
- Medium6.5Unauthenticated Server-Side Request Forgery via Form Field Upload Mapping
≤2.8.7Update to 2.8.8
- High7.2Open Redirect
≤2.4.10Update to 2.5.0
Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation: common questions
Does Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation have known vulnerabilities?
Yes. VulnCrest Radar lists 5 known vulnerabilities in Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation: 4 high, 1 medium. None are known to affect version null.
How do I check which version of Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation vulnerability?
CVE-2026-104749, published Oct 13, 2026: Bit integrations <= 2.10.6 - Unauthenticated Privilege Escalation via Identity-Confused Log Re-execution to Account Takeover via Log Re-execution of Anonymous-Captured Field Data. Severity: High (CVSS 7.5).
Is any Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation vulnerability listed in CISA KEV?
No. None of the known Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation vulnerabilities is currently listed in the CISA KEV catalog.