HT Contact Form – Drag & Drop Form Builder for WordPress vulnerabilities
6 known vulnerabilities in HT Contact Form – Drag & Drop Form Builder for WordPress from Htplugins. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
HT Contact Form – Drag & Drop Form Builder for…: Improper Neutralization of Input During Web Page Generation
The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Rich Text Editor Field in all versions up to, and including, 2.10.2 due to insufficient input sanitization and output escapin
- 7.2 High severity
HT Contact Form – Drag & Drop Form Builder for…: Improper Neutralization of Input During Web Page Generation
The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'form_data' Rich Text Field via Draft Save/Resume in all versions up to, and including, 2.10.1 due to insufficient inpu
- 7.2 High severity
HT Contact Form – Drag & Drop Form Builder for…: Improper Neutralization of Input During Web Page Generation
The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'file_upload' parameter in all versions up to, and including, 2.8.2 due to insufficient input sanitization and output escapin
- 9.8 Critical severity
HT Contact Form – Drag & Drop Form Builder for…: Improper Limitation of a Pathname to a Restricted Directory
The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerable to arbitrary file moving due to insufficient file path validation in the handle_files_upload() function in all versions up to, and includ
- 9.8 Critical severity
HT Contact Form – Drag & Drop Form Builder for…: Improper Privilege Management
The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the temp_file_delete() function in all versions up to, and includi
- 9.8 Critical severity
HT Contact Form – Drag & Drop Form Builder for…: Unrestricted Upload of File with Dangerous Type
The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the temp_file_upload() function in all versions up to, and including, 2.