CVE-2024-5084

🗓️ 23 May 2024 14:31:38Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 233 Views🌐 WEB

The Hash Form plugin for WordPress has arbitrary file upload vulnerabilit

Reporter	Title	Published	Views	Family All 28
zdt	WordPress Hash Form Plugin Remote Code Execution Exploit	5 Jun 202400:00	–	zdt
GithubExploit	Exploit for Authentication Bypass by Spoofing in Booster Booster_For_Woocommerce	16 Feb 202612:12	–	githubexploit
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Hashthemes Hash_Form	5 Feb 202617:34	–	githubexploit
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Hashthemes Hash_Form	27 May 202420:04	–	githubexploit
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Hashthemes Hash_Form	25 May 202403:49	–	githubexploit
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Hashthemes Hash_Form	30 Nov 202409:15	–	githubexploit
Circl	CVE-2024-5084	5 Jun 202408:42	–	circl
CNNVD	WordPress plugin Hash Form Drag Drop Form Builder 安全漏洞	23 May 202400:00	–	cnnvd
Cvelist	CVE-2024-5084 Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution	23 May 202414:31	–	cvelist
Kitploit	CVE-2024-5084	12 Oct 202610:46	–	kitploit

NVD

Vulners

Vulnrichment

Node

hashthemes hash_formRange<1.1.1wordpress

[
  {
    "vendor": "hashthemes",
    "product": "Hash Form – Drag & Drop Form Builder",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.1.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/hash-form/trunk/admin/classes/HashFormBuilder.php
plugins	www.plugins.trac.wordpress.org/changeset/3090341/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/eef9e2fa-d8f0-42bf-95ac-ee4cafff0b14

Parameter	Position	Path	Description	CWE
action	query param	/wp-admin/admin-ajax.php	Nonce retrieval for file upload (hashform_preview) used by the Hash Form plugin vulnerable endpoint.	CWE-434
form	query param	/wp-admin/admin-ajax.php	Nonce retrieval for file upload (hashform_preview) used by the Hash Form plugin vulnerable endpoint.	CWE-434
action	binary	/wp-admin/admin-ajax.php	Arbitrary file upload via file_upload_action due to missing file type validation, enabling PHP payload upload.	CWE-434
file_uploader_nonce	binary	/wp-admin/admin-ajax.php	Arbitrary file upload via file_upload_action due to missing file type validation, enabling PHP payload upload.	CWE-434
allowedExtensions[0]	binary	/wp-admin/admin-ajax.php	Arbitrary file upload via file_upload_action due to missing file type validation, enabling PHP payload upload.	CWE-434
sizeLimit	binary	/wp-admin/admin-ajax.php	Arbitrary file upload via file_upload_action due to missing file type validation, enabling PHP payload upload.	CWE-434
qqfile	binary	/wp-admin/admin-ajax.php	Arbitrary file upload via file_upload_action due to missing file type validation, enabling PHP payload upload.	CWE-434

17 Jun 2026 08:15Current

9.8Critical risk

Vulners AI Score9.8

CVSS 3.19.8

EPSS0.50653

SSVC

CWE-434