WordPress Hash Form plugin <= 1.4.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Supakiad S. m3ez in WordPress Plugin Hash Form versions = 1.4.1...

CVE-2026-78280

Unauthenticated Cross Site Request Forgery CSRF in Hash Form = 1.4.0 versions...

CVE-2026-78280 WordPress Hash Form plugin <= 1.4.0 - Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery CSRF in Hash Form = 1.4.0 versions...

EUVD-2026-64787

Unauthenticated Cross Site Request Forgery CSRF in Hash Form = 1.4.0 versions...

CVE-2026-78280

CVE-2026-78280 is an unauthenticated Cross-Site Request Forgery (CSRF) vulnerability in the WordPress Hash Form plugin , affecting versions 1.4.0 and earlier . The flaw was discovered by sanghyeok Kim and reported via Patchstack. Per the CVSS 3.1 vector, an attacker with network access and low co...

CVE-2026-78280 WordPress Hash Form plugin <= 1.4.0 - Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery CSRF in Hash Form = 1.4.0 versions...

WordPress Hash Form plugin <= 1.4.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by sanghyeok Kim in WordPress Plugin Hash Form versions = 1.4.0...

CVE-2026-78280: Cross-Site Request Forgery (CSRF)

Unauthenticated Cross Site Request Forgery CSRF in Hash Form = 1.4.0 versions...

PT-2026-80816

Unauthenticated Cross Site Request Forgery CSRF in Hash Form = 1.4.0 versions...

Exploit for Unrestricted Upload of File with Dangerous Type in Hashthemes Hash_Form

No d...

EUVD-2024-50674

Malicious code in bioql PyPI...

EUVD-2025-13849

Malicious code in bioql PyPI...

CVE-2024-9417

The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to limited file uploads due to a misconfigured file type validation in the 'handleUpload' function in all versions up to, and including, 1.1.9. This makes it possible for unauthenticated attackers to upload files that are...

CVE-2025-47468

Cross-Site Request Forgery CSRF vulnerability in hashthemes Hash Form hash-form allows Cross Site Request Forgery.This issue affects Hash Form: from n/a through = 1.2.8...

CVE-2025-47468

Cross-Site Request Forgery CSRF vulnerability in hashthemes Hash Form hash-form allows Cross Site Request Forgery.This issue affects Hash Form: from n/a through = 1.2.8...

CVE-2025-47468

CVE-2025-47468 : CSRF vulnerability in the WordPress plugin Hash Form (Hash Form) affecting versions up to 1.2.8. The CVE entry from NVD/Red Hat/CVE lists a CSRF issue; PatchStack notes the vulnerability and a patch exists (patched). Connected sources confirm affected software and provide remedia...

CVE-2025-47468 WordPress Hash Form plugin <= 1.2.8 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in hashthemes Hash Form hash-form allows Cross Site Request Forgery.This issue affects Hash Form: from n/a through = 1.2.8...

CVE-2025-47468 WordPress Hash Form plugin <= 1.2.8 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in hashthemes Hash Form hash-form allows Cross Site Request Forgery.This issue affects Hash Form: from n/a through = 1.2.8...

CVE-2025-47468: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in hashthemes Hash Form hash-form allows Cross Site Request Forgery.This issue affects Hash Form: from n/a through = 1.2.8...

WordPress plugin Hash Form 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...