Bit integrations vulnerabilities

The Bit integrations plugin for WordPress is vulnerable to privilege escalation via log re-execution in all versions up to and including 2.10.6. Unauthenticated attackers can overwrite the administrator's password and take over the administrator account.

The Bit Integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress in all versions up to and including 2.10.6 is vulnerable to Stored Cross-Site Scripting via the field mapped to notification_content (attacker-chosen key, e.g. payload_text) due to insufficient input sanitization and output escaping. Exploitation requires a site administrator to have preconfigured a Bit Integrations flow binding the public Bit Assist webhook to a BuddyBoss "Send Notification" action with a form field mapped to notification_content, and the attacker to know the flow's UUID callback URL.

The Bit integrations plugin for WordPress up to version 2.9.0 has a Directory Traversal vulnerability in the processAttachment function. Unauthenticated attackers can read arbitrary files on the server, including sensitive information.