Advisories · Technology

hashthemes Hash Form.

Every CVE that names hashthemes Hash Form among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-81780 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

WordPress Hash Form plugin <= 1.4.2 - Arbitrary File Upload vulnerability
- hashthemes Hash Form
- Unrestricted file upload
Not analysed yet 31 Aug 2026
CVE-2026-78292 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress Hash Form plugin <= 1.4.1 - PHP Object Injection vulnerability
- hashthemes Hash Form
- Insecure deserialization
Not analysed yet 27 Aug 2026
CVE-2026-78280 CVE record

CVSS 4.3 Medium

WordPress Hash Form plugin <= 1.4.0 - Cross Site Request Forgery (CSRF) vulnerability
- HashThemes Hash Form
- Cross-site request forgery (CSRF)
Not analysed yet 24 Aug 2026
CVE-2025-47468 CVE record

CVSS 4.3 Medium

WordPress Hash Form plugin <= 1.2.8 - Cross Site Request Forgery (CSRF) Vulnerability
- hashthemes Hash Form
- Cross-site request forgery (CSRF)
Not analysed yet 7 May 2025