https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T14:25:16.560683+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2025-19412 cnvd-2025-19412 2026-10-05T14:25:16.563238+00:00 cnvd-2025-19412 https://cve.radiocsirt.org/vuln/euvd-2026-285099 EUVD-2026-285099 2026-10-05T14:25:16.563271+00:00 EUVD-2026-285099 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6679 fkie_cve-2025-6679 2026-10-05T14:25:16.563285+00:00

The Bit Form builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 2.20.4. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. For this to be exploitable, the PRO version needs to be installed and activated as well. Additionally a form with an advanced file upload element needs to be published.

 https://cve.radiocsirt.org/vuln/ghsa-q776-mw7h-gmxg GHSA-q776-mw7h-gmxg 2026-10-05T14:25:16.563315+00:00

The Bit Form builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 2.20.4. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. For this to be exploitable, the PRO version needs to be installed and activated as well. Additionally a form with an advanced file upload element needs to be published.