CVE-2025-7340

🚨 HT Contact Form Widget を追加します。 ✅ 例: http://target.com/wp-content/uploads/htf...

WordPress-HT-Contact-CVE-2025-7340-RCE

WordPress HT Contact Form Widget | CVE-2025-7340 ファイルアップロード脆弱性分析 脆弱性の場所 脆弱性の場所：ht-contactform/admin/Includes/Services/FileManager.php 重要な関数：tempfileupload 1. 主な脆弱性ポイント：tempfileupload 関数 63行 public function tempfileupload$file $destination = "$this-dir/temp";...

CVE-2025-7340: Unrestricted Upload of File with Dangerous Type

The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the tempfileupload function in all versions up to, and including, 2.2.1. This makes it possible for...