CVE-2026-15054
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Jul 30, 2026
Vendor
unknown
Description
The Bit Form WordPress plugin before 3.1.2 does not enforce a form's active/published status on its public form-submission handlers, allowing unauthenticated users to submit entries to, and fire the configured workflows (such as email notifications) of forms the site owner has deactivated or unpublished.