Hashthemes Hash Form vulnerabilities

• hashthemes hash form WordPress Hash Form plugin <= 1.4.2 - Arbitrary File Upload vulnerability CVE-2026-81780 Public exploit 10.0 CriticalAugust 31, 2026
• hashthemes hash form WordPress Hash Form plugin <= 1.4.1 - PHP Object Injection vulnerability CVE-2026-78292 9.8 CriticalAugust 27, 2026
• hashthemes hash form WordPress Hash Form plugin <= 1.4.0 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-78280 4.3 MediumAugust 24, 2026
• hashthemes hash form WordPress Hash Form plugin <= 1.2.8 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-47468 4.3 MediumMay 7, 2025
• hashthemes hash form – drag & drop form builder, hash form +1 more Hash Form <= 1.2.1 - Missing Authorization to Authenticated (Contributor+) Form Style Creation CVE-2024-12201 4.3 MediumDecember 12, 2024
• hashthemes hash form – drag & drop form builder, hash form +1 more Hash Form - Drag & Drop Form Builder <= 1.1.9 - Unauthenticated Limited File Upload CVE-2024-9417 6.1 MediumOctober 5, 2024
• hashthemes hash form – drag & drop form builder, hash form +1 more Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated PHP Object Injection CVE-2024-5085 8.1 HighMay 23, 2024
• hashthemes hash form – drag & drop form builder, hash form, drag and drop form builder +2 more Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution CVE-2024-5084 Public exploit EPSS 50.9% 9.8 CriticalMay 23, 2024