Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. 2.2.1

  • Severity: critical
  • Status: Fixed
  • Publication: July 14, 2025

The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is not secure because it does not check the type of files being uploaded. This means that anyone, even without permission, can upload harmful files to the website’s server. This could potentially allow attackers to run code on the website.

Detected in:

HT Contact Form – Drag & Drop Form Builder for WordPress fixed vulnerable versions:
HT Contact Form – Easy Form Builder for WordPress fixed vulnerable versions:
HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.