80 matches found
CVE-2024-5084
Wordpress Hash Form – Drag & Drop Form Builder = 1.1.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution CVE-2024-5084 The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'fileuploadaction'...
CVE-2024-5084
Hash Form 9.9.1 file upload vulnerability Exploit The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'fileuploadaction' function in all versions up to, and including, 1.1.0. This makes it possible for...
CVE-2026-81780-Hash-Form
CVE-2026-81780-Hash-Form CVE-2026-81780 — Hash Form RCE The Vulnerability Unauthenticated file upload in WordPress Hash Form plugin ≤ 1.4.2. The plugin allows arbitrary file uploads without proper authentication or file type validation, leading to Remote Code Execution RCE. Exploit Chain Step...
CVE-2024-5084-Red-Team
🚀 HashForm Exploit – Lab Demo This repository contains a proof-of-concept exploit for CVE-2024-5084, a vulnerability found in the Hash Form WordPress plugin. It’s meant only for learning, lab testing, and security research. 📌 About the Vulnerability CVE ID: CVE-2024-5084 Issue: Unauthenticated fi...
VulnCheck KEV: CVE-2024-9417
The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to limited file uploads due to a misconfigured file type validation in the 'handleUpload' function in all versions up to, and including, 1.1.9. This makes it possible for unauthenticated attackers to upload files that are...
Exploit for CVE-2026-81780
CVE-2026-81780 — Hash Form ≤ 1.4.2 Unauthenticated RCE !CVE...
Exploit for CVE-2026-81780
CVE-2026-...
CVE-2026-81780
Unauthenticated Arbitrary File Upload in Hash Form = 1.4.2 versions...
CVE-2026-81780 WordPress Hash Form plugin <= 1.4.2 - Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload in Hash Form = 1.4.2 versions...
CVE-2026-81780 WordPress Hash Form plugin <= 1.4.2 - Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload in Hash Form = 1.4.2 versions...
CVE-2026-81780
Hash Form is a WordPress plugin affected by an unauthenticated arbitrary file upload vulnerability in versions
EUVD-2026-68792
Unauthenticated Arbitrary File Upload in Hash Form = 1.4.2 versions...
CVE-2026-81780: Unrestricted Upload of File with Dangerous Type
Unauthenticated Arbitrary File Upload in Hash Form = 1.4.2 versions...
PT-2026-84018
Name of the Vulnerable Software and Affected Versions Hash Form versions 1.4.2 and earlier Description An unauthenticated arbitrary file upload issue exists, allowing an attacker to upload files, such as a web shell, without requiring authentication. Recommendations Update Hash Form to a version...
WordPress Hash Form plugin <= 1.4.2 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by CoryRoo in WordPress Plugin Hash Form versions = 1.4.2...
CVE-2026-78292
Unauthenticated PHP Object Injection in Hash Form = 1.4.1 versions...
CVE-2026-78292
CVE-2026-78292 is an unauthenticated PHP Object Injection vulnerability in the WordPress plugin Hash Form , affecting versions
CVE-2026-78292 WordPress Hash Form plugin <= 1.4.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Hash Form = 1.4.1 versions...