Access Control

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File DeletionCVE-2025-7341htplugins · CVSS 9.1 · 1.2% likely

   CWE-269

2. HT Easy GA4 – Google Analytics WordPress Plugin <= 1.1.5 - Missing Authorization to Unauthenticated GA4 Email UpdateCVE-2024-1176htplugins · CVSS 5.3 · 0.6% likely

   CWE-862

3. Insert Headers and Footers Code – HT Script <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Limited Options UpdateCVE-2025-2779htplugins · CVSS 6.5 · 0.3% likely

   CWE-862

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.