CVE-2025-30885

Summary

CVE-2025-30885 is a newly identified vulnerability affecting the Bit Form – Contact Form Plugin. This issue qualifies as an Open Redirect vulnerability, which means that an attacker can manipulate URLs and redirect unsuspecting users to phishing sites or other malicious destinations. The Bit Form plugin, used for creating contact forms in WordPress sites, is the source of this vulnerability. Affected versions range from not available to 2.18.0. Users are strongly advised to update to a secure version as soon as possible to mitigate the risk of potential phishing attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.