Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

HT Contact Form – Drag & Drop Form Builder for WordPress — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in HT Contact Form – Drag & Drop Form Builder for WordPress, with AI-generated Chinese analysis, references, and POCs.

Vendor: htplugins

CVE IDTitleCVSSSeverityPublished
CVE-2026-7052 HT Contact Form <= 2.8.2 - Unauthenticated Stored Cross-Site Scripting via File Upload Field CWE-79 7.2 High2026-05-28
CVE-2025-7360 HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Directory Traversal to Arbitrary File Move CWE-22 9.1 Critical2025-07-15
CVE-2025-7340 HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload CWE-434 9.8 Critical2025-07-15
CVE-2025-7341 HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Deletion CWE-269 9.1 Critical2025-07-15

All 4 known CVE vulnerabilities affecting HT Contact Form – Drag & Drop Form Builder for WordPress with full Chinese analysis, references, and POCs where available.