CVE-2026-104749 Bit integrations <= 2.10.6 - Unauthenticated Privilege Escalation via Identity-Confused Log Re-execution to Account Takeover via Log Re-execution of Anonymous-Captured Field Data

The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Privilege Escalation via Log Re-execution in all versions up to, and including, 2.10.6 The vulnerability exists because IntegrationHandler::executeWithCapture stores...

CVE-2026-104749

The Bit integrations plugin for WordPress (versions up to and including 2.10.6 ) is vulnerable to Unauthenticated Privilege Escalation leading to full account takeover. The root cause lies in IntegrationHandler::executeWithCapture() storing raw, attacker-controlled field values (such as user_pass...