IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API

Vulnerabilidades de htplugins (CVE)

Registros CVE publicados para htplugins, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

HT Contact Form – Drag & Drop Form Builder for WordPress 6Insert Headers and Footers Code – HT Script 2Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) 2WishSuite – Wishlist for WooCommerce 1WP Team – WordPress Team Member Plugin 1Docus – YouTube Video Playlist 1HT Easy GA4 – Google Analytics WordPress Plugin 1HT Slider For Elementor 1
15 resultados
9.8Crítica
CVE-2026-94589

Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) <= 3.4.5 - Unauthenticated Arbitrary File Upload via Signature Field File Upload

htplugins Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)

The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.4.5 via the extcf7_submit function. This is due to missing file extension,…

7.2Alta
CVE-2026-96326

HT Contact Form – Drag & Drop Form Builder for WordPress <= 2.10.2 Unauthenticated Stored Cross-Site Scripting via Rich Text Editor Field

htplugins HT Contact Form – Drag & Drop Form Builder for WordPress

The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Rich Text Editor Field in all versions up to, and including, 2.10.2 due to insufficient input sanitization and output escapi…

7.2Alta
CVE-2026-93303

HT Contact Form <= 2.10.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'form_data' Rich Text Field via Draft Save/Resume

htplugins HT Contact Form – Drag & Drop Form Builder for WordPress

The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'form_data' Rich Text Field via Draft Save/Resume in all versions up to, and including, 2.10.1 due to insufficient inp…

8.1Alta
CVE-2025-7645

Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) <= 3.2.8 - Unauthenticated Arbitrary File Deletion Triggered via Admin Form Submission Deletion

htplugins Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)

The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delete-file' field in all versions up to, and including, 3.2.8.…

9.8Crítica
CVE-2025-7340

HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload

htplugins HT Contact Form – Drag & Drop Form Builder for WordPress

The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the temp_file_upload() function in all versions up to, and including, 2…

6.0%EPSS
9.1Crítica
CVE-2025-7360

HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Directory Traversal to Arbitrary File Move

htplugins HT Contact Form – Drag & Drop Form Builder for WordPress

The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerable to arbitrary file moving due to insufficient file path validation in the handle_files_upload() function in all versions up to, and inclu…

1.5%EPSS
9.1Crítica
CVE-2025-7341

HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Deletion

htplugins HT Contact Form – Drag & Drop Form Builder for WordPress

The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the temp_file_delete() function in all versions up to, and includ…

1.2%EPSS
5.3Media
CVE-2024-1176

HT Easy GA4 – Google Analytics WordPress Plugin <= 1.1.5 - Missing Authorization to Unauthenticated GA4 Email Update

htplugins HT Easy GA4 – Google Analytics WordPress Plugin; hasthemes ht_easy_ga4_\(google_analytics_4\)

The HT Easy GA4 – Google Analytics WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the login() function in all versions up to, and including, 1.1.5. This makes it possible for unaut…