Description
(CVE-2025-7340) HT Contact Form Widget插件任意文件上传漏洞
(CVE-2025-7340) HT Contact Form Widget插件任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-7340
https://www.wordfence.com/blog/2025/07/10000-wordpress-sites-affected-by-critical-vulnerabilities-in-ht-contact-form-wordpress-plugin/
https://github.com/Nxploited/CVE-2025-7340
https://www.sentinelone.com/vulnerability-database/cve-2025-7340/
https://patchstack.com/database/wordpress/plugin/ht-contactform/vulnerability/wordpress-ht-contact-form-widget-for-elementor-page-builder-gutenberg-blocks-form-builder-plugin-2-2-1-unauthenticated-arbitrary-file-upload-vulnerability
https://wpscan.com/vulnerability/91f39d58-1379-4908-bdeb-9c9bce39fb2c/
https://app.opencve.io/cve/CVE-2025-7340
https://www.ameeba.com/blog/cve-2025-7340-critical-arbitrary-file-upload-vulnerability-in-ht-contact-form-widget-for-wordpress/