HT Contact Form vulnerabilities
We track 1 vulnerability in HT Contact Form products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 10, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest HT Contact Form vulnerabilities
- 7.5 High severity
HT Contact Form: Exposure of Sensitive Information to an Unauthorized Actor
The HT Contact Form WordPress plugin before 2.9.3 does not perform any authorization check on the endpoint that returns a saved form draft, allowing unauthenticated users to read the personal data (name, email, phone, address) stored in form drafts.