Plugin icon

Hash Form – Drag & Drop Form Builder

hash-form

Vulnerabilities:

8

Last Updated:

September 4, 2026

Active Installs:

3000

Published
Title
Fixed in
CVSS
Published
2026-08-28
Title
Hash Form – Drag & Drop Form Builder < 1.4.3 - Unauthenticated Arbitrary File Upload
Fixed in
Fixed in 1.4.3
CVSS
9.8 (critical)
Published
2026-08-25
Title
Hash Form – Drag & Drop Form Builder < 1.4.2 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 1.4.2
CVSS
8.1 (high)
Published
2026-08-24
Title
Hash Form – Drag & Drop Form Builder < 1.4.1 - Cross-Site Request Forgery
Fixed in
Fixed in 1.4.1
CVSS
4.3 (medium)
Published
2025-05-07
Title
Hash Form < 1.2.9 - Cross-Site Request Forgery
Fixed in
Fixed in 1.2.9
CVSS
4.3 (medium)
Published
2024-12-11
Title
Hash Form < 1.2.2 - Missing Authorization to Authenticated (Contributor+) Form Style Creation
Fixed in
Fixed in 1.2.2
CVSS
4.3 (medium)
Published
2024-10-04
Title
Hash Form - Drag & Drop Form Builder < 1.2.0 - Unauthenticated Limited File Upload
Fixed in
Fixed in 1.2.0
CVSS
6.1 (medium)
Published
2024-05-22
Title
Hash Form – Drag & Drop Form Builder < 1.1.1 - Unauthenticated Arbitrary File Upload to Remote Code Execution
Fixed in
Fixed in 1.1.1
CVSS
9.8 (critical)
Published
2024-05-22
Title
Hash Form – Drag & Drop Form Builder < 1.1.1 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 1.1.1
CVSS
8.1 (high)