Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation, with AI-generated Chinese analysis, references, and POCs.

Vendor: bitpressadmin

CVE ID	Title	CVSS	Severity	Published
CVE-2026-104749	Bit integrations <= 2.10.6 - Unauthenticated Privilege Escalation via Identity-Confused Log Re-execution to Account Takeover via Log Re-execution of Anonymous-Captured Field Data CWE-269	7.5	High	2026-10-14
CVE-2026-102007	Bit integrations <= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via 'notification_content' Field via Public Bit Assist Webhook Callback CWE-79	7.2	High	2026-10-13
CVE-2026-15006	Bit integrations <= 2.9.0 - Unauthenticated Arbitrary File Read via Optional CF7 File Field CWE-22	7.5	High	2026-08-01
CVE-2026-11989	Bit integrations <= 2.8.7 - Unauthenticated Server-Side Request Forgery via Form Field Upload Mapping CWE-918	6.5	Medium	2026-06-19

All 4 known CVE vulnerabilities affecting Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation with full Chinese analysis, references, and POCs where available.