This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login.
Read the full analysis →
Q1What is this vulnerability? (Essence + Consequences)
🚨 **Essence**: Critical Arbitrary File Upload in HT Contact Form. <br>⚡ **Consequences**: Attackers can upload malicious files (e.g., webshells) leading to full **Remote Code Execution (RCE)** and server compromise.…
🔍 **Root Cause**: Missing file type validation in the `temp_file_upload` function. <br>📂 **Location**: `ht-contactform/admin/Includes/Services/FileManager.php`.…
👥 **Affected**: WordPress Plugin **HT Contact Form – Drag & Drop Form Builder**. <br>📉 **Version**: **2.2.1** and earlier. <br>🏢 **Vendor**: htplugins.
Q4What can hackers do? (Privileges/Data)
💀 **Attacker Actions**: <br>1. Upload arbitrary files (PHP shells). <br>2. Execute code on the server (RCE). <br>3. Steal sensitive data or pivot to internal networks.…
📉 **Threshold**: **LOW**. <br>👤 **Auth**: **Unauthenticated**. No login required. <br>⚙️ **Config**: Exploitable via standard form upload interfaces. <br>🎯 **Ease**: High (CVSS AV:N, AC:L, PR:N).
Q6Is there a public Exp? (PoC/Wild Exploitation)
🔥 **Public Exploit**: **YES**. <br>📂 **PoCs Available**: <br>- `Nxploited/CVE-2025-7340` (GitHub). <br>- `Kai-One001/WordPress-HT-Contact-CVE-2025-7340-RCE` (GitHub). <br>⚠️ **Status**: Actively exploitable in the wild.
Q7How to self-check? (Features/Scanning)
🔎 **Self-Check**: <br>1. Scan for plugin version **<= 2.2.1**. <br>2. Check for `FileManager.php` in admin/includes. <br>3. Use WAF rules to block `.php` uploads in temp directories. <br>4.…
🛡️ **Official Fix**: **YES**. <br>📅 **Patch Date**: Reference to changeset **3326887** on WordPress Trac. <br>✅ **Action**: Update plugin to the latest version immediately. Check vendor site for patched release.
Q9What if no patch? (Workaround)
🚧 **No Patch Workaround**: <br>1. **Disable** the HT Contact Form plugin immediately. <br>2. Restrict file upload permissions via `.htaccess` or WAF. <br>3. Monitor server logs for suspicious upload attempts. <br>4.…
⚠️ **Urgency**: **CRITICAL**. <br>🔴 **Priority**: **P0 / Immediate Action**. <br>📢 **Reason**: Unauthenticated RCE with public PoCs. High risk of immediate compromise. Patch or disable NOW.