WordPress security by component
Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation
Plugin description
Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Jun 19, 2026; the highest CVE/CNA score is 6.5.
Plugin slug:
bit-integrationsLatest vulnerability
CVE-2026-11989: Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation: Server-side request forgery
Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation is affected by server-side request forgery. The vulnerable path is reachable without authentication. The vulnerable server can be induced to make attacker-selected network requests. The published affected range is <= 2.8.7.
| Safe version |
|
||
|---|---|---|---|
| Jun 19, 2026 |
CVE-2026-11989
Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation: Server-side request forgery
Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation is affected by server-side request forgery. The vulnerable path is reachable without authentication. The vulnerable server can be induced to make attacker-selected network requests. The published affected range is <= 2.8.7.
|
> 2.8.7 |
CVE6.5
NVDPending
|
| Mar 27, 2025 |
CVE-2025-30884
Bit Integrations: An open redirect
Bit Integrations is affected by an open redirect. Exposure depends on how the affected operation is made reachable by the site. A crafted link can redirect visitors from the trusted site to an attacker-controlled destination.
|
See mitigation notes |
CVE4.7
NVDPending
|