CVE-2026-15054 in Bit Form Plugin

الملخص

بحسب MITRE • 30/07/2026

The Bit Form WordPress plugin before 3.1.2 does not enforce a form's active/published status on its public form-submission handlers, allowing unauthenticated users to submit entries to, and fire the configured workflows (such as email notifications) of forms the site owner has deactivated or unpublished.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• مسؤول: WPScan
• حجز: 08/07/2026
• إفشاء: 30/07/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-384585
• CPE: جاهز
• CWE: CWE-862 (مؤكد)
• CVSS: 7.3 (VulDB)
• EPSS: 0.00000
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Hostingprovider

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-15054
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-15054
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-15054/