HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload
70Vexday Risk Score
Prioriza la corrección. Ella explotación observada por VulnCheck y tiene prueba de concepto pública.
ssvc Actcvss 9.8epss 1.6%
de la publicación al arma0 días
Publicada en NVD15 jul
1ª PoC14 jul
VulnCheck+293d
probabilidad de explotación
1.6%top 26% de las CVE
explotación observada
síVulnCheck
4 exploit(s) público(s)
The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the temp_file_upload() function in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
htplugins · HT Contact Form – Drag & Drop Form Builder for WordPressPoCs públicas encontradas — 4
githubgithub.com/Nxploited/CVE-2025-7340★ 7githubgithub.com/Kai-One001/WordPress-HT-Contact-CVE-2025-7340-RCE★ 0vulncheckvulncheck.com/xdb/e14c341b3c0fno verificadovulncheckvulncheck.com/xdb/c92481161317no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
https://plugins.trac.wordpress.org/browser/ht-contactform/trunk/admin/Includes/Services/FileManager.php#L86https://plugins.trac.wordpress.org/changeset/3326887/ht-contactform/trunk/admin/Includes/Services/FileManager.php?contextall=1&old=3316109&old_path=%2Fht-contactform%2Ftrunk%2Fadmin%2FIncludes%2FServices%2FFileManager.phphttps://www.wordfence.com/threat-intel/vulnerabilities/id/f0cb666b-bfab-492f-a74e-11dc9b171136?source=cve