Medium 6.6
2025-07-16< 2.1.0
CVE-2025-54015
Minimum safe version
2.2.2
Update to 2.2.2 or later to address 6 fixable vulnerabilities
CVE-2025-54015
HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Directory Traversal to Arbitrary File Move
HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Deletion
HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload
CVE-2025-24726
CVE-2023-0484