CVE-2024-1640

🗓️ 23 May 2025 08:23:30Reported by redhat.comType

Unauthenticated attackers can modify forms via bitforms_update_form_entry in plugin up to 2.10.1.

Reporter	Title	Published	Views	Family All 11
CNNVD	WordPress Plugin Contact Form Builder Security Vulnerability	13 Mar 202400:00	–	cnnvd
CVE	CVE-2024-1640	13 Mar 202415:26	–	cve
Cvelist	CVE-2024-1640 Contact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form <= 2.10.1 - Unauthenticated Insecure Direct Object Reference to Form Submission Alteration	13 Mar 202415:26	–	cvelist
EUVD	EUVD-2024-17378	3 Oct 202520:07	–	euvd
NVD	CVE-2024-1640	13 Mar 202416:15	–	nvd
Patchstack	WordPress Bit Form – Contact Form Plugin Plugin <= 2.10.1 is vulnerable to Insecure Direct Object References (IDOR)	13 Mar 202400:00	–	patchstack
Prion	Input validation	13 Mar 202416:15	–	prion
Positive Technologies	PT-2024-18188 · Bit Form · Contact Form Builder Plugin	13 Mar 202400:00	–	ptsecurity
Vulnrichment	CVE-2024-1640 Contact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form <= 2.10.1 - Unauthenticated Insecure Direct Object Reference to Form Submission Alteration	13 Mar 202415:26	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (March 11, 2024 to March 17, 2024)	21 Mar 202415:55	–	wordfence