CVE-2024-43249

Severity

CRITICAL

CVSS

9.9

EPSS

0.01049

Risk score

39.97

CISA KEV

PoC

Published

2024-08-19

Modified

2026-04-28

First seen

2026-08-07

Aliases

EUVD-2024-40141, GHSA-MGFJ-PW53-G28V

Products

Bit Apps:Bit Form Pro n/a ≤2.6.4

Sources

euvd EUVD-2024-40141

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Bit Apps Bit Form Pro allows Command Injection.This issue affects Bit Form Pro: from n/a through 2.6.4.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-40141
https://patchstack.com/database/vulnerability/bitformpro/wordpress-bit-form-pro-plugin-2-6-4-authenticated-arbitrary-file-upload-vulnerability?_s_id=cve