HIGH 7.5 NVD
CVE-2026-15006
The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Directory Traversal in all ver
The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.9.0 via the processAttachment function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.
References
- https://plugins.trac.wordpress.org/browser/bit-integrations/tags/2.8.11/backend/Actions/Ma
- https://plugins.trac.wordpress.org/browser/bit-integrations/tags/2.8.11/backend/Actions/Ma
- https://plugins.trac.wordpress.org/browser/bit-integrations/tags/2.8.11/backend/Triggers/C
- https://plugins.trac.wordpress.org/browser/bit-integrations/tags/2.8.11/backend/Triggers/C
- https://plugins.trac.wordpress.org/browser/bit-integrations/tags/2.9.0/backend/Actions/Mai
This high severity vulnerability with a CVSS score of 7.5 was published on 2026-08-01 via NVD.
vulnfeed aggregates 9166 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.