CVE-2026-104749 | CVSS: 7.5 | 严重级别: HIGH
The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Privilege Escalation via Log Re-execution in all versions up to, and including, 2.10.6 The vulnerability exists because `IntegrationHandler::executeWithCapture()` stores raw, attacker-controlled field values — including `user_pass` and `user_email` — verbatim into `wp_btcbi_log.field_data` on anonymous front-end requests with no capability check, and `LogHandler::reexecute()` feeds that stored payload back through `Flow::execute()` inside the replaying administrator
参考链接:
• https://plugins.trac.wordpress.org/browser/bit-integrations/tags/2.10.6/backend/
• https://plugins.trac.wordpress.org/browser/bit-integrations/tags/2.10.6/backend/
• https://plugins.trac.wordpress.org/browser/bit-integrations/tags/2.10.6/backend/
📌 数据来源: NVD 官方