HT संपर्क फ़ॉर्म विजेट फ़ॉर एलिमेंटर पेज बिल्डर & गुटेनबर्ग ब्लॉक्स & फ़ॉर्म बिल्डर. <= 2.2.1 - अनाधिकृत मनमाना फ़ाइल विलोपन

The primary impact of CVE-2025-7341 is the ability for an unauthenticated attacker to delete files on the server. While the vulnerability is classified as arbitrary file access, the description explicitly states that deleting critical files like wp-config.php can lead to remote code execution. Successful exploitation would grant an attacker complete control over the WordPress installation, allowing them to modify content, install malicious plugins, steal sensitive data (database credentials, user information), and potentially pivot to other systems on the network. The ease of exploitation, combined with the plugin's popularity, makes this a high-risk vulnerability.

Websites using the HT Contact Form plugin, particularly those with limited security configurations or outdated WordPress installations, are at significant risk. Shared hosting environments where users have limited control over server file permissions are also particularly vulnerable, as an attacker could potentially exploit this vulnerability to compromise the entire hosting account.

• wordpress / plugin: Use wp-cli plugin update to check the installed version and update if necessary. • wordpress / plugin: Search plugin files for the tempfiledelete() function and any instances of insufficient file path validation. • generic web: Monitor web server access logs for requests targeting plugin endpoints with unusual file paths or deletion attempts. Look for patterns like /wp-content/plugins/ht-contact-form/tempfiledelete.php?file=wp-config.php. • generic web: Use curl to test for file deletion vulnerabilities by attempting to delete files via plugin endpoints.

curl -X POST "/wp-content/plugins/ht-contact-form/temp_file_delete.php?file=/path/to/sensitive/file" -d "param1=value1"

1. 2025-07-15Disclosure

   disclosure

2. 2025-07-16CISA KEV

   kev

1. आरक्षित2025-07-07
2. प्रकाशित2025-07-15
3. संशोधित2026-04-08
4. EPSS अद्यतन2026-03-23

The primary mitigation for CVE-2025-7341 is to immediately upgrade the HT Contact Form plugin to version 2.2.2 or later. If upgrading is not immediately feasible due to compatibility issues or testing requirements, consider temporarily restricting file access permissions on the server to limit the potential damage from file deletion. Web application firewalls (WAFs) configured to detect and block suspicious file deletion attempts targeting the plugin's endpoints could provide an additional layer of defense. Monitor WordPress logs for unusual file deletion activity.