CVE-2026-102007 Bit integrations <= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via 'notification_content' Field via Public Bit Assist Webhook Callback

The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'field mapped to notificationcontent attacker-chosen key, e.g. payloadtext' parameter in all versions up to, and including, 2.10.6...

CVE-2026-102007 Bit integrations <= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via 'notification_content' Field via Public Bit Assist Webhook Callback

The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'field mapped to notificationcontent attacker-chosen key, e.g. payloadtext' parameter in all versions up to, and including, 2.10.6...

CVE-2026-102007

The Bit integrations plugin for WordPress (versions up to and including 2.10.6 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping within the 'field mapped to notification_content' parameter (e.g., payload_text). This flaw a...