Skip to content
OpenAdvisories

Vendor

htplugins

15 known vulnerabilities.

Products

HT Contact Form – Drag & Drop Form Builder for WordPress 6 Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) 2 Insert Headers and Footers Code – HT Script 2 Docus – YouTube Video Playlist 1 HT Slider For Elementor 1 WishSuite – Wishlist for WooCommerce 1 WP Team – WordPress Team Member Plugin 1 HT Easy GA4 – Google Analytics WordPress Plugin 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-94589

    Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) <= 3.4.5 - Unauthenticated Arbitrary File Upload via Signature Field File Upload

    The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.4.5 via the extcf7_submit function. This is due to missing file extension,…

    htplugins Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) Web / CMS
  • Critical 9.8
    CVE-2025-7340 Public exploit

    HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload

    The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the temp_file_upload() function in all versions up to, and including, 2…

    htplugins HT Contact Form – Drag & Drop Form Builder for WordPress Web / CMS
  • Critical 9.1
    CVE-2025-7360

    HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Directory Traversal to Arbitrary File Move

    The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerable to arbitrary file moving due to insufficient file path validation in the handle_files_upload() function in all versions up to, and inclu…

    htplugins HT Contact Form – Drag & Drop Form Builder for WordPress Web / CMS
  • Critical 9.1
    CVE-2025-7341

    HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Deletion

    The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the temp_file_delete() function in all versions up to, and includ…

    htplugins HT Contact Form – Drag & Drop Form Builder for WordPress Web / CMS