CVE-2025-7360

Published July 15th, 2025

View on NVD ↗

CVSS v3

9.1

CRITICAL

CVSS v2

N/A

Affected

PROJECT

Description

The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerable to arbitrary file moving due to insufficient file path validation in the handle_files_upload() function in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated attackers to move arbitrary files on the server, which can easily lead to remote code execution when the right file is moved (such as wp-config.php).

HT Contact Form – Drag & Drop Form Builder for WordPress

Stop struggling with complicated form plugins. HT Contact Form is the WordPress form builder that gets out of your way and lets you create beautiful, functional forms in minutes – not hours. Whether you need a simple contact form, a detailed application, or a complex survey with conditional logic, HT Contact Form has you covered. No coding required. No expensive add-ons. Just drag, drop, and publish. <a href="https://hasthemes.com/plugins/ht-contact-form/" rel="nofollow ugc">Learn More</a> | <a href="https://hasthemes.com/docs-category/ht-contact-forms/" rel="nofollow ugc">Documentation</a> | <a href="https://hasthemes.com/contact-us/" rel="nofollow ugc">Support</a> <iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/raW1OPdg46Q?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe> <h3>Key Features</h3> 🎨 Drag & Drop Builder – Design forms visually with our intuitive builder. No coding needed. 📝 38+ Form Fields – Everything from basic text inputs to signatures, file uploads, and repeater fields. 🔗 21+ Integrations – Connect to Mailchimp, HubSpot, Zapier, Slack, and more – all included free. 💾 Save & Resume – Let users save their progress and complete forms later via unique link. 🔀 Conditional Logic – Show or hide fields based on user selections. 🛡️ Spam Protection – Built-in honeypot, reCAPTCHA v2/v3, and hCaptcha support. 📊 Entry Management – Store, search, filter, and export all submissions from your dashboard. 📧 Email Notifications – Instant alerts with 5 pre-designed email templates. 🏷️ Smart Tags – Dynamic field values that auto-populate from user data, URLs, or other fields. 📱 Fully Responsive – Forms look perfect on desktop, tablet, and mobile. 🎯 Form Styling – Customize colors, fonts, borders, and spacing to match your brand. 📤 Export Options – Download entries as CSV, Excel, ODS, or JSON. <h3>What’s New</h3> 🔗 9 New Integrations – Connect forms to GetResponse, Drip, Moosend, iContact, MailPoet, Notion, Trello, HubSpot, and Zoho CRM. 📧 Email Marketing – GetResponse, Drip, Moosend, iContact, and MailPoet integrations for subscriber management. 💼 CRM Integrations – HubSpot and Zoho CRM for contact and lead management. 📂 Productivity Tools – Notion databases and Trello boards integration for workflow automation. <h3>Build Any Form You Need</h3> <ul> <li>📬 Contact Forms – Simple inquiry forms with name, email, and message</li> <li>🎯 Lead Generation – Capture leads with custom fields and send to your CRM</li> <li>📋 Surveys & Feedback – Multi-question forms with ratings, NPS, and conditional logic</li> <li>✅ Signup Forms – Collect user details for newsletters, events, or services</li> <li>📄 Application Forms – Long forms with save & resume functionality</li> <li>🎫 Support Requests – Ticket creation with file attachments and priority selection</li> </ul> <h3>38+ Form Fields</h3> ✏️ Basic Input Text, Textarea, Email, Number, Phone, Password, Website, Name (with formats) ☑️ Selection Dropdown, Radio Buttons, Checkboxes, Multiple Choice, Country List ⚙️ Advanced Repeater (dynamic rows), Chained Select, Post Selection, Rich Text Editor 📅 Date & Time Date/Time Picker (with calendar and time selection) 📎 Uploads File Upload, Image Upload, Signature Capture 🧩 Layout Section Break, Custom HTML, Shortcode Embed 🔐 Security reCAPTCHA (v2 & v3), hCaptcha, GDPR Consent, Terms & Conditions ⭐ Special Save & Resume, Star Rating, NPS Score, Color Picker, Range Slider, Mask Input, Hidden Field, Action Hook <h3>21+ Integrations</h3> 📧 Email Marketing Mailchimp, ActiveCampaign, MailerLite, GetResponse, Drip, Moosend, iContact, MailPoet, Constant Contact, Brevo 💼 CRM HubSpot, Zoho CRM, Insightly, OnepageCRM 📂 Productivity Notion, Trello, Slack, Discord ⚡ Automation Zapier (connect to 5000+ apps), Custom Webhooks 🎫 Support Support Genix (helpdesk tickets) <h3>Why Choose HT Contact Form?</h3> 💰 Free & Powerful – Get features that competitors charge hundreds for. No form limits, no entry limits, no hidden costs. ⚡ Modern Interface – Built with React for a fast, smooth admin experience. No page reloads, instant previews. 🔗 All Integrations Included – 21+ integrations at no extra cost. Connect your forms to the tools you already use. 👨‍💻 Developer Friendly – Action hooks, custom HTML fields, and webhook support for unlimited extensibility. 🚀 Active Development – Regular updates with new fields, integrations, and features based on user feedback. <h3>Other Projects</h3> <a href="https://wordpress.org/plugins/woolentor-addons/" rel="ugc">ShopLentor (Woolentor)</a> – WooCommerce page builder with 125+ widgets, 36 modules including Shopify-style checkout, Quick View, Wishlist, and Compare features. <a href="https://wordpress.org/plugins/support-genix-lite/" rel="ugc">Support Genix</a> – AI-powered helpdesk with ticketing system, knowledge base, and 24/7 chatbot support for customer service. <a href="https://wordpress.org/plugins/ht-mega-for-elementor/" rel="ugc">HT Mega For Elementor</a> – Elementor addon with 135+ widgets, AI Content Writer, Theme Builder, Mega Menu Builder, and 790+ ready blocks. <a href="https://wordpress.org/plugins/hashbar-wp-notification-bar/" rel="ugc">Hashbar WP Notification Bar</a> – Create unlimited notification bars for announcements, promotions, and alerts. <a href="https://wordpress.org/plugins/ht-easy-google-analytics/" rel="ugc">HT Easy GA4</a> – Track your website visitors and view Google Analytics dashboard reports from your website. <a href="https://wordpress.org/plugins/wp-plugin-manager/" rel="ugc">WP Plugin Manager</a> – Disable certain plugins on specific pages or posts for better performance. Activate or deactivate plugins on a per-page basis. <a href="https://wordpress.org/plugins/extensions-for-cf7/" rel="ugc">Extensions For CF7</a> – Contact Form 7 Database, Conditional Fields, and Mailchimp integration for lead generation. <a href="https://wordpress.org/plugins/whols/" rel="ugc">Whols</a> – WooCommerce wholesale pricing plugin. Set wholesale prices, custom registration fields, and minimum requirements. Works like Wholesale Suite, B2Bking. <a href="https://wordpress.org/plugins/just-tables/" rel="ugc">JustTables</a> – WooCommerce product table plugin with 28 pre-built columns, custom fields support, and drag-and-drop ordering. <a href="https://wordpress.org/plugins/swatchly/" rel="ugc">Swatchly</a> – WooCommerce product variation swatches with color, label, and image swatch types. <a href="https://wordpress.org/plugins/ht-slider-for-elementor/" rel="ugc">HT Slider For Elementor</a> – Powerful slider addon for Elementor with custom styling options and navigation controls. <h3>🎬 Video created by the community</h3> <iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/m0dwUPKQAUE?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe> <h3>Need Help?</h3> Have a feature request or need assistance? <a href="https://hasthemes.com/contact-us/" rel="nofollow ugc">Contact Us</a>

WordPress Plugin Directory

249K