Vulnerabilitycritical

Critical Flaws in WordPress Plugin Leave 10,000 Sites Vulnerable

Infosecurity Magazineby Alessandro MascellinoJul 28, 2025 · 16:05 UTC (Jul 28, 2025)2 min read1 · 1 read

Read at infosecurity-magazine.com

Analyze CVE-2025-7340 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2025-7340 CVE-2025-7341 CVE-2025-7360

Tags: cve-2025-7340 cve-2025-7341 cve-2025-7360 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-7340 +2 related CVEs CVE-2025-7360 CVE-2025-7341	The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to…	9.8	2%		Jul 15, 2025

From the original article

2 min read at infosecurity-magazine.com

More than 10,000 WordPress sites have been left vulnerable to full site takeover due to three critical security flaws discovered in the HT Contact Form Widget for Elementor Page Builder & Gutenberg Blocks & Form Builder plugin.

Infosecurity Magazine

By Alessandro Mascellino · infosecurity-magazine.com

Read the full article at Infosecurity Magazine

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.