Skip to content
Noroxi

Hash Form

hash-form · plugin

Known security vulnerabilities for Hash Form. Find out in seconds which version runs on your site with WP Lens.

8 known vulnerabilities

4 critical · 2 with public exploit code · latest Aug 31, 2026

Vulnerabilities

  • CVE-2026-81780

    WordPress Hash Form plugin <= 1.4.2 - Arbitrary File Upload vulnerability

    Critical 10.0

  • CVE-2026-78292

    WordPress Hash Form plugin <= 1.4.1 - PHP Object Injection vulnerability

    Critical 9.8

  • CVE-2024-5085

    Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated PHP Object Injection

    Critical 9.8

  • CVE-2024-5084

    Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution

    Critical 9.8

  • CVE-2024-9417

    Hash Form - Drag & Drop Form Builder <= 1.1.9 - Unauthenticated Limited File Upload

    Medium 6.1

  • CVE-2026-78280

    WordPress Hash Form plugin <= 1.4.0 - Cross Site Request Forgery (CSRF) vulnerability

    Medium 4.3

  • CVE-2025-47468

    WordPress Hash Form plugin <= 1.2.8 - Cross Site Request Forgery (CSRF) Vulnerability

    Medium 4.3

  • CVE-2024-12201

    Hash Form <= 1.2.1 - Missing Authorization to Authenticated (Contributor+) Form Style Creation

    Medium 4.3

← Back to directory