https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-7360.htmlhttps://patchthecve.com/cve/CVE-2025-7360.htmlWed, 17 Jun 2026 10:04:46 +0000CRITICAL 9.1: The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerable to arbitrary file moving due to insufficient file path validation in the handle_files_upload() function in all versions up to, and including, 2.2.1. This makes it possible for uhttps://patchthecve.com/cve/CVE-2025-7341.htmlhttps://patchthecve.com/cve/CVE-2025-7341.htmlWed, 17 Jun 2026 10:04:45 +0000CRITICAL 9.1: The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the temp_file_delete() function in all versions up to, and including, 2.2.1. This makes it possible for unhttps://patchthecve.com/cve/CVE-2025-7340.htmlhttps://patchthecve.com/cve/CVE-2025-7340.htmlWed, 17 Jun 2026 10:04:45 +0000CRITICAL 9.8: The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the temp_file_upload() function in all versions up to, and including, 2.2.1. This makes it possible for unauthen