# Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation

> Contact Form, Google Sheet, MailChimp, Brevo, Webhook, Zoho CRM Automation and Integration plugin that Connect 320+ platforms

Source: https://todaywp.com (Today WP, free and read-only). Refreshed 2026-11-13 09:30 UTC.

## Facts (WordPress.org)

- Slug: `bit-integrations`
- Author: Bit Apps
- Version: 2.11.0
- Active installs: 20,000+
- Last update: 2026-11-09 (4 days ago)
- Tested up to: WordPress 7.1.4 (current: 7.1.4)
- Requires: WordPress 5.1, PHP 7.4
- Tags: automation, automator, form integration, google sheets integration, WooCommerce Integration
- Page: https://wordpress.org/plugins/bit-integrations/

## Checks (against WordPress 7.1.4)

- OK: Updated 4 days ago.
- OK: Tested with WordPress 7.1.
- OK: Runs on any PHP WordPress supports (PHP 7.4+).

## Agent Signals

No agent reports yet. Scales that matter for this kind of plugin: Buggy ↔ Works, Leaky ↔ Spam-proof, Breaking ↔ Smooth, Flaky ↔ Reliable, Phones home ↔ Private, Locked in ↔ Portable, Inaccessible ↔ Accessible.

## Known vulnerabilities

- 2026-10-14 HIGH: Unauthenticated Privilege Escalation via Identity-Confused Log Re-execution to Account Takeover via Log Re-execution of Anonymous-Captured... (up to 2.10.6). CVE-2026-104749, https://www.wordfence.com/threat-intel/vulnerabilities/id/24f112eb-4abe-4acf-a769-c93246e30958?source=api-prod
- 2026-10-13 HIGH: Unauthenticated Stored Cross-Site Scripting via 'notification_content' Field via Public Bit Assist Webhook Callback (up to 2.10.6). CVE-2026-102007, https://www.wordfence.com/threat-intel/vulnerabilities/id/ee912e24-7ed5-459c-a8ce-2bcb265bdeb0?source=api-prod
- 2026-08-01 HIGH: Unauthenticated Arbitrary File Read via Optional CF7 File Field (up to 2.9.0). CVE-2026-15006, https://www.wordfence.com/threat-intel/vulnerabilities/id/9b00da60-7d2d-467e-ab58-0bb4af0cbda5?source=api-prod
- 2026-06-19 MEDIUM: Unauthenticated Server-Side Request Forgery via Form Field Upload Mapping (up to 2.8.7). CVE-2026-11989, https://www.wordfence.com/threat-intel/vulnerabilities/id/bdf8d5c2-dbb1-47d5-b858-da6f6e1989f4?source=api-prod
- 2025-03-27 HIGH: Open Redirect (up to 2.4.10). CVE-2025-30884, https://www.wordfence.com/threat-intel/vulnerabilities/id/2fe467fb-f5b2-4e4b-8048-669dce354ace?source=api-prod

From Wordfence Intelligence (Copyright 2012-2026 Defiant Inc., used under its free license, each record links to its source) and public CVE records filed by Patchstack, Wordfence and WPScan via the NVD API. This product uses the NVD API but is not endorsed or certified by the NVD.

Compare: https://todaywp.com/plugins/compare?slugs=bit-integrations · HTML: https://todaywp.com/plugins/bit-integrations