HomeCVE Intelligence › CVE-2026-13693
CVSS 9.1 CRITICAL Vulnerability

CVE-2026-13693: CVE-2026-13693 - Bit Form < 3.1.0 - Unauthenticated Arbitrary File Read via Path Traversal

CVE ID : CVE-2026-13693 Published : July 21, 2026, 7:16 a.m. | 36minutes ago Description : The Bit Form WordPress plugin before 3.1.0 does not restrict a form file-field value to a safe path before reading the file and…

9.1CVSS Score
CRITICALSeverity
NOCISA KEV
VulnerabilityImpact Type

📋 Vulnerability Details

CVE IDCVE-2026-13693
VendorUnknown Vendor
Affected ProductUnknown Product
Vulnerability TypeVulnerability
CVSS Score9.1 (CRITICAL)
Actively Exploited❌ No known exploitation
Patch StatusPending Vendor Disclosure
Reported ByCYBERDUDEBIVASH SENTINEL APEX Intelligence (via sentinel_apex)

🔬 Technical Analysis

CVE ID : CVE-2026-13693

Published : July 21, 2026, 7:16 a.m. | 36minutes ago

Description : The Bit Form WordPress plugin before 3.1.0 does not restrict a form file-field value to a safe path before reading the file and attaching it to a notification email, allowing unauthen... [Full analysis available on Pro]

⚡ DETECTION RULES AVAILABLE

Get CVE-2026-13693 Detection Pack

Sigma rules, YARA signatures, IOC table, and SIEM queries for Splunk, Elastic, Sentinel, and Chronicle — deployable in 5 minutes.

✓ Sigma Rules ✓ YARA Pack ✓ IOC Table ✓ SIEM Queries
🛡️ Get Detection Pack → 🔌 Access via API →

🔗 Related Intelligence