Filtered by vendor Bit Form Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-15054 2 Bit Form, Wordpress 2 Bit Form, Wordpress 2026-07-30 N/A
The Bit Form WordPress plugin before 3.1.2 does not enforce a form's active/published status on its public form-submission handlers, allowing unauthenticated users to submit entries to, and fire the configured workflows (such as email notifications) of forms the site owner has deactivated or unpublished.