Author: Vincent Fermo, GSAS '26

Recently, three vulnerabilities were discovered that affected over 10,000 WordPress sites.  The vulnerabilities include Arbitrary File Upload, Arbitrary File Deletion, and Arbitrary File Move which could potentially allow unauthorized attackers to execute malicious code or access and delete important files.  The National Vulnerability Database has recorded these vulnerabilities and has provided each of them with a numerical score ranging from 0 (least critical) to 10 (most critical). You can find these and more from the National Institute of Standards and Technology website – nist.gov. The Vulnerabilities: CVE-2025-7340 (Score: 9.8 CRITICAL):  The HT Contact Form Widget For Elementor Page Builder & Gutenberg…