HT Contact Form – Drag & Drop Form Builder for WordPress

Explore HT Contact Form – Drag & Drop Form Builder for WordPress vulnerabilities across all versions. Currently tracking 8 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSHigh

7.5/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all HT Contact Form – Drag & Drop Form Builder for WordPress vulnerabilities before they are exploited.

Vulnerability Records

8 records


2026-05-27 18:06	HT Contact Form <= 2.8.2 - Unauthenticated Stored Cross-Site Scripting via File Upload Field HT Contact Form <= 2.8.2	`CVE-2026-7052`	7.2 High	Azril Fathoni (kiseki)	Yes
2026-05-20 00:00	HT Contact Form – Drag & Drop Form Builder for WordPress <= 2.8.2 - Unauthenticated Stored Cross-Site Scripting HT Contact Form <= 2.8.2	`CVE-2026-42728`	7.2 High	daroo	Yes
2025-07-16 00:00	HT Contact Form 7 <= 2.0.0 - Authenticated (Administrator+) Local File Inclusion HT Contact Form <= 2.0.0	`CVE-2025-54015`	6.6 Medium	Ananda Dhakal	Yes
2025-07-14 15:59	HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload HT Contact Form <= 2.2.1	`CVE-2025-7340`	9.8 Critical	vgo0	Yes
2025-07-14 15:58	HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Directory Traversal to Arbitrary File Move HT Contact Form <= 2.2.1	`CVE-2025-7360`	9.1 Critical	Phat RiO	Yes
2025-07-14 15:58	HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Deletion HT Contact Form <= 2.2.1	`CVE-2025-7341`	9.1 Critical	vgo0	Yes
2025-01-24 00:00	HT Conctact Form 7 <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting HT Contact Form <= 1.2.1	`CVE-2025-24726`	6.4 Medium	Peter Thaleikis	Yes
2023-02-28 00:00	Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks <= 1.1.5 - Cross-Site Request Forgery to Arbitrary Plugin Activation HT Contact Form <= 1.1.5	`CVE-2023-0484`	4.3 Medium	István Márton	Yes

Showing 1–8 of 8 reports