File and Path Handling

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. HT Contact Form Widget for Elementor <= 2.2.1 - Unauthenticated Arbitrary File UploadCVE-2025-7340htplugins · CVSS 9.8 · 6.0% likely

   CWE-434

2. HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Directory Traversal to Arbitrary File MoveCVE-2025-7360htplugins · CVSS 9.1 · 1.5% likely

   CWE-22

3. WordPress WishSuite plugin <= 1.4.4 - Local File Inclusion VulnerabilityCVE-2025-30820HT Plugins · CVSS 7.5 · 1.1% likely

   CWE-98

4. Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) <= 3.2.8 - Unauthenticated Arbitrary File Deletion Triggered via Admin Form Submission DeletionCVE-2025-7645htplugins · CVSS 8.1 · 0.9% likely

   CWE-22

5. Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) <= 3.4.5 - Unauthenticated Arbitrary File Upload via Signature Field File UploadCVE-2026-94589htplugins · CVSS 9.8 · 0.7% likely

   CWE-434

6. WordPress HT Contact Form 7 plugin <= 2.0.0 - Local File Inclusion VulnerabilityCVE-2025-54015HT Plugins · CVSS 6.6 · 0.6% likely

   CWE-98

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.