Skip to content
OpenAdvisories

Product · HashThemes

Hash Form – Drag & Drop Form Builder

4 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.1

    Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated PHP Object Injection

    The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.1.0 via deserialization of untrusted input in the 'process_entry' function. This makes it possible for unauthenticated …