All vulnerabilities

WordPress plugins

CVE-2026-104749

Bit integrations <= 2.10.6 - Unauthenticated Privilege Escalation via Identity-Confused Log Re-execution to Account Takeover via Log Re-execution of Anonymous-Captured Field Data

Severity
High 7.5
Published
14 Oct 2026
Last changed
14 Oct 2026
Added to UpHeron
14 Oct 2026
Sources
CVE Program

Affected software

SoftwareAffected versions
Bit Integrations (WordPress plugin)WordPress plugins · wp-plugin:bit-integrations
  • Every version up to 2.10.6

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-104749