Contact Form Builder
Vendor:
First CVE: Aug 14, 2023 · Active for 2 years
8
Total CVEs
More Total CVEs than 85% of tracked products
2.7
Avg CVEs / Year
Higher CVE frequency than 75% of tracked products
6.4
Avg CVSS
Higher Avg CVSS than 28% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Contact Form Builder over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 14, 2023
2 years ago
Most Recent CVE
Jan 25, 2025
546 days ago
CVE Severity & Scoring
Contact Form Builder8 CVEs
63%
25%
13%
All CVEs352,427 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network8 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low8 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None6 (75.0%)
Unknown0 (0.0%)
Required2 (25.0%)
Privileges Required
Low0 (0.0%)
High7 (87.5%)
None1 (12.5%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-7777CRITICAL The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to arbitrary file rea | Aug 20, 2024 | 9.0 | 26 | NO | NO |
CVE-2024-7782MEDIUM The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to arbitrary file del | Aug 20, 2024 | 6.5 | 21 | NO | NO |
CVE-2024-7780HIGH The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to generic SQL Inject | Aug 20, 2024 | 7.2 | 21 | NO | NO |
CVE-2024-7702HIGH The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to generic SQL Inject | Aug 20, 2024 | 7.2 | 21 | NO | NO |
CVE-2024-13450MEDIUM The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to Server-Side Reques | Jan 25, 2025 | 6.5 | 20 | NO | NO |
CVE-2024-7775MEDIUM The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to arbitrary JavaScri | Aug 20, 2024 | 4.8 | 18 | NO | NO |
CVE-2024-1640MEDIUM The Contact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form plugin for WordPress is vulnerable to unauthorized modification of da | Mar 13, 2024 | 5.3 | 16 | NO | NO |
CVE-2023-3645MEDIUM The Contact Form Builder by Bit Form WordPress plugin before 2.2.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perfor | Aug 14, 2023 | 4.8 | 16 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (8 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (8 CVEs).
Media Mentions
Signals from CVEs in this product scope (8 CVEs).
Top CNAs Publishing CVEs For Contact Form Builder
Top CWEs
Versions
No cataloged versions.