CVE-2025-7340

🚨 HT Contact Form Widget 를 추가하여 시스템 명령을 실행하세요. ✅ 예시: http://target.com/wp-content/uploads/htform/temp/shell.php?cmd=whoami 🖥️ 예시 출력...

WordPress-HT-Contact-CVE-2025-7340-RCE

WordPress HT Contact Form Widget | CVE-2025-7340 파일 업로드 취약점 분석 취약점 위치 취약점 위치: ht-contactform/admin/Includes/Services/FileManager.php 핵심 함수: tempfileupload 1. 주요 취약점 지점: tempfileupload 함수 63행 public function tempfileupload$file $destination = "$this-dir/temp";...

CVE-2025-7340: Unrestricted Upload of File with Dangerous Type

The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the tempfileupload function in all versions up to, and including, 2.2.1. This makes it possible for...