CVE-2025-7341 HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Deletion

🗓️ 15 Jul 2025 04:23:40Reported by WordfenceType

HT Contact Form Widget for WordPress allows unauthenticated file deletion, risking remote code execution.

Reporter	Title	Published	Views	Family All 11
CNNVD	WordPress plugin HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder 安全漏洞	15 Jul 202500:00	–	cnnvd
CVE	CVE-2025-7341	15 Jul 202504:23	–	cve
EUVD	EUVD-2025-21415	3 Oct 202520:07	–	euvd
NVD	CVE-2025-7341	15 Jul 202505:15	–	nvd
Patchstack	WordPress HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. plugin <= 2.2.1 - Unauthenticated Arbitrary File Deletion vulnerability	14 Jul 202521:12	–	patchstack
Positive Technologies	PT-2025-29537	15 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-7341	17 Jul 202504:59	–	redhatcve
The Hacker News	⚡ Weekly Recap: VPN 0-Day, Encryption Backdoor, AI Malware, macOS Flaw, ATM Hack & More	4 Aug 202511:55	–	thn
Vulnrichment	CVE-2025-7341 HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Deletion	15 Jul 202504:23	–	vulnrichment
Wordfence Blog	10,000 WordPress Sites Affected by Critical Vulnerabilities in HT Contact Form WordPress Plugin	25 Jul 202514:01	–	wordfence

[
  {
    "vendor": "htplugins",
    "product": "HT Contact Form – Drag & Drop Form Builder for WordPress",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "2.2.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3326887/ht-contactform/trunk/admin/Includes/Ajax.php
plugins	www.plugins.trac.wordpress.org/browser/ht-contactform/trunk/admin/Includes/Services/FileManager.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/32da04ba-bee3-4fd3-b91b-57e588d5f4e4

08 Apr 2026 16:45Current

CVSS 3.19.1

EPSS0.0163

CWE-269