Plugin icon

Hash Form – Drag & Drop Form Builder

hash-form

Vulnerabilities:

5

Last Updated:

April 8, 2026

Active Installs:

4000

Published
Title
Fixed in
CVSS
Published
2025-05-07
Title
Hash Form < 1.2.9 - Cross-Site Request Forgery
Fixed in
Fixed in 1.2.9
CVSS
4.3 (medium)
Published
2024-12-11
Title
Hash Form < 1.2.2 - Missing Authorization to Authenticated (Contributor+) Form Style Creation
Fixed in
Fixed in 1.2.2
CVSS
4.3 (medium)
Published
2024-10-04
Title
Hash Form - Drag & Drop Form Builder < 1.2.0 - Unauthenticated Limited File Upload
Fixed in
Fixed in 1.2.0
CVSS
6.1 (medium)
Published
2024-05-22
Title
Hash Form – Drag & Drop Form Builder < 1.1.1 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 1.1.1
CVSS
8.1 (high)
Published
2024-05-22
Title
Hash Form – Drag & Drop Form Builder < 1.1.1 - Unauthenticated Arbitrary File Upload to Remote Code Execution
Fixed in
Fixed in 1.1.1
CVSS
9.8 (critical)