htplugins HT Contact Form – Drag & Drop Form Builder for WordPress

• CVE-2026-96326 High 7.2 HT Contact Form – Drag & Drop Form Builder for WordPress <= 2.10.2 Unauthenticated Stored Cross-Site Scripting via Rich Text Editor Field 0.2%
• CVE-2026-93303 High 7.2 HT Contact Form <= 2.10.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'form_data' Rich Text Field via Draft Save/Resume 0.2%
• CVE-2026-7052 High 7.2 HT Contact Form <= 2.8.2 - Unauthenticated Stored Cross-Site Scripting via File Upload Field 0.3%
• CVE-2025-7340 Critical 9.8 HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload 1.8%
• CVE-2025-7360 Critical 9.1 HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Directory Traversal to Arbitrary File Move 1.5%
• CVE-2025-7341 Critical 9.1 HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Deletion 1.2%