CVE-2025-7340

🗓️ 15 Jul 2025 04:23:42Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 54 Views🌐 WEB

HT Contact Form Widget allows unauthenticated file uploads due to missing validation in versions <= 2.2.1

Reporter	Title	Published	Views	Family All 16
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Hasthemes Download_Contact_Form_7_Widget_For_Elementor_Page_Builder_\&_Gutenberg_Blocks	14 Jul 202523:27	–	githubexploit
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Hasthemes Download_Contact_Form_7_Widget_For_Elementor_Page_Builder_\&_Gutenberg_Blocks	4 Aug 202514:30	–	githubexploit
Circl	CVE-2025-7340	15 Jul 202503:00	–	circl
CNNVD	WordPress plugin HT Contact Form 代码问题漏洞	15 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-7340 HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload	15 Jul 202504:23	–	cvelist
EUVD	EUVD-2025-21412	3 Oct 202520:07	–	euvd
NVD	CVE-2025-7340	15 Jul 202505:15	–	nvd
Packet Storm News	WordPress HT Contact Form Widget 2.2.1 Shell Upload	15 Jul 202500:00	–	packetstormnews
Patchstack	WordPress HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. plugin <= 2.2.1 - Unauthenticated Arbitrary File Upload vulnerability	14 Jul 202521:14	–	patchstack
Positive Technologies	PT-2025-29532	14 Jul 202500:00	–	ptsecurity

NVD

Vulners

Node

hasthemes download_contact_form_7_widget_for_elementor_page_builder_&_gutenberg_blocksRange<2.2.2wordpress

[
  {
    "vendor": "htplugins",
    "product": "HT Contact Form – Drag & Drop Form Builder for WordPress",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "2.2.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/f0cb666b-bfab-492f-a74e-11dc9b171136
plugins	www.plugins.trac.wordpress.org/changeset/3326887/ht-contactform/trunk/admin/Includes/Services/FileManager.php
plugins	www.plugins.trac.wordpress.org/browser/ht-contactform/trunk/admin/Includes/Services/FileManager.php

Parameter	Position	Path	Description	CWE
file	request body	/wp-admin/admin-ajax.php	Unauthenticated users can upload arbitrary files via AJAX endpoint ht_form_temp_fileUpload, enabling potential remote code execution due to lack of server-side file-type validation.	CWE-434

17 Jun 2026 10:04Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.19.8

EPSS0.0161

SSVC