Bit Apps vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Bit Apps products: 3 record(s), with severity, exploitation and fixes.

Bit Form 1 Bit SMTP 1 Bit Assist 1

Exploited only (KEV) →

CVE-2026-32519 Critical · 9.0 CWE-266 Mar 25, 2026

WordPress Bit SMTP plugin <= 1.2.2 - Broken Authentication vulnerability

Incorrect Privilege Assignment vulnerability in Bit Apps Bit SMTP bit-smtp allows Privilege Escalation.This issue affects Bit SMTP: from n/a through <= 1.2.2.

CVE-2026-25418 High · 7.6 CWE-89 Feb 19, 2026

WordPress Bit Form plugin <= 2.21.10 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bit Apps Bit Form bit-form allows SQL Injection.This issue affects Bit Form: from n/a through <= 2.21.10.

CVE-2025-68596 Medium · 5.3 CWE-862 Dec 24, 2025

WordPress Bit Assist plugin <= 1.5.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in Bit Apps Bit Assist bit-assist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bit Assist: from n/a through <= 1.5.11.