Advisories · Technology

HT Plugins HT Contact Form 7.

Every CVE that names HT Plugins HT Contact Form 7 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-42728 CVE record

CVSS 7.1 High

WordPress HT Contact Form 7 plugin <= 2.8.2 - Cross Site Scripting (XSS) vulnerability
- HT Plugins HT Contact Form 7
- Cross-site scripting (XSS)
Not analysed yet 27 May 2026
CVE-2025-54015 CVE record

CVSS 6.6 Medium

WordPress HT Contact Form 7 plugin <= 2.0.0 - Local File Inclusion Vulnerability
- HT Plugins HT Contact Form 7
- File inclusion
Not analysed yet 16 Jul 2025
CVE-2025-24726 CVE record

CVSS 6.5 Medium

WordPress Contact Form 7 Widget plugin <= 1.2.1 - Stored Cross Site Scripting (XSS) vulnerability
- HT Plugins HT Contact Form 7
- Cross-site scripting (XSS)
Not analysed yet 24 Jan 2025