CVE-2025-7341 – Elementor Page Builder & Gutenberg Blocks & Form Builder File Deletion Vulnerability

July 15, 2025

CVE ID : CVE-2025-7341

Published : July 15, 2025, 5:15 a.m. | 10 hours, 29 minutes ago

Description : The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the temp_file_delete() function in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).

Severity: 9.1 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-7360 – Elementor Page Builder & Gutenberg Blocks & Form Builder HT Contact Form Widget File Moving Vulnerability

Next Article CVE-2025-7340 – “Elementor HT Contact Form Widget File Upload Vulnerability”

Akka introduces platform for distributed agentic AI

Design Patterns For AI Interfaces

Amazon launches spec-driven AI IDE, Kiro

This week in AI dev tools: Gemini API Batch Mode, Amazon SageMaker AI updates, and more (July 11, 2025)

AI-powered malware eludes Microsoft Defender’s security checks 8% of the time — with just 3 months of training and “reinforcement learning” for around $1,600

7 games that are perfect for handheld gaming PCs — with my favorite Steam Deck, ROG Ally, and Legion Go titles

Windows 11 Firewall with Advanced Security flags up errors in “under development” code — but it’s nothing to worry about

Metal Gear Solid Delta: Snake Eater — How to pre-order, release dates, story, gameplay, and everything else you need to know

The details of TC39’s last meeting

The details of TC39’s last meeting

Revolutionize Your IoT Management with Total.js IoT Platform: Simplify, Monitor, and Optimize

Creating a Brand Kit in Stream: Why It Matters and How It helps Organizations

AI-powered malware eludes Microsoft Defender’s security checks 8% of the time — with just 3 months of training and “reinforcement learning” for around $1,600

AI-powered malware eludes Microsoft Defender’s security checks 8% of the time — with just 3 months of training and “reinforcement learning” for around $1,600

7 games that are perfect for handheld gaming PCs — with my favorite Steam Deck, ROG Ally, and Legion Go titles

Windows 11 Firewall with Advanced Security flags up errors in “under development” code — but it’s nothing to worry about

CVE-2025-7341 – Elementor Page Builder & Gutenberg Blocks & Form Builder File Deletion Vulnerability

CVE-2025-5393 – WordPress Alone Charity Multipurpose Non-profit Theme Arbitrary File Deletion Vulnerability

CVE-2025-5394 – Alone – Charity Multipurpose Non-profit WordPress Theme Unauthenticated Arbitrary File Upload Vulnerability

CVE-2024-52035 – Catdoc OLE Document File Allocation Table Parser Integer Overflow Heap Corruption Vulnerability

Microsoft made a stunning 50th-anniversary Surface Laptop. Here’s how to get one.

I’ve put almost 100 hours into this new wholesome MMO on Xbox, and I’m still in the prologue — Here’s why I love it

My Hollow Knight: Silksong hopes were dashed by Summer Game Fest, but the Xbox Games Showcase might deliver

Thailand and Malaysia Ramp Up Financial Cybersecurity Amid Escalating Threats

FloQast builds an AI-powered accounting transformation solution with Anthropic’s Claude 3 on Amazon Bedrock

CVE-2025-20994 – Samsung Internet File Access Vulnerability

Clipchamp makes video editing faster, brings ability to delete parts of transcript to trim video

CVE-2025-7341 – Elementor Page Builder & Gutenberg Blocks & Form Builder File Deletion Vulnerability

Related Posts