CVE-2026-15054 in Bit Form Plugin
Сводка
по MITRE • 30.07.2026
The Bit Form WordPress plugin before 3.1.2 does not enforce a form's active/published status on its public form-submission handlers, allowing unauthenticated users to submit entries to, and fire the configured workflows (such as email notifications) of forms the site owner has deactivated or unpublished.
If you want to get best quality of vulnerability data, you may have to visit VulDB.