HashThemes Hash Form vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting HashThemes Hash Form: 3 record(s), with affected versions and fixes.
CVE-2026-81780
Critical · 10.0
CWE-434 Aug 31, 2026
WordPress Hash Form plugin <= 1.4.2 - Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload in Hash Form <= 1.4.2 versions.
CVE-2026-78292
Critical · 9.8
CWE-502 Aug 27, 2026
WordPress Hash Form plugin <= 1.4.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Hash Form <= 1.4.1 versions.
CVE-2026-78280
Medium · 4.3
CWE-352 Aug 24, 2026
WordPress Hash Form plugin <= 1.4.0 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery (CSRF) in Hash Form <= 1.4.0 versions.