CVE-2026-15054

creationtimestamp| type| source ---|---|--- 2026-08-08 23:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msm7b7gyb525 2026-08-09 19:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msoccxmwyb22...

CVE-2026-15054

The Bit Form WordPress plugin before 3.1.2 does not enforce a form's active/published status on its public form-submission handlers, allowing unauthenticated users to submit entries to, and fire the configured workflows such as email notifications of forms the site owner has deactivated or...