What’s Vulnerable › Products
hashthemes Hash Form – Drag & Drop Form Builder vulnerabilities
8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.
Check whether your hashthemes Hash Form – Drag & Drop Form Builder version is affected
Latest hashthemes Hash Form – Drag & Drop Form Builder vulnerabilities
- CVE-2026-81780 — WordPress Hash Form plugin <= 1.4.2 - Arbitrary File Upload vulnerability (CVSS 10.0)
- CVE-2026-78292 — WordPress Hash Form plugin <= 1.4.1 - PHP Object Injection vulnerability (CVSS 9.8)
- CVE-2026-78280 — WordPress Hash Form plugin <= 1.4.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- CVE-2025-47468 — WordPress Hash Form plugin <= 1.2.8 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 4.3)
- CVE-2024-12201 — Hash Form <= 1.2.1 - Missing Authorization to Authenticated (Contributor+) Form Style Creation (CVSS 4.3)
- CVE-2024-9417 — Hash Form - Drag & Drop Form Builder <= 1.1.9 - Unauthenticated Limited File Upload (CVSS 6.1)
- CVE-2024-5085 — Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated PHP Object Injection (CVSS 9.8)
- CVE-2024-5084 — Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution (CVSS 9.8)