Skip to content
OpenAdvisories

Product · HashThemes

Hash Form – Drag & Drop Form Builder

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-12201

    Hash Form <= 1.2.1 - Missing Authorization to Authenticated (Contributor+) Form Style Creation

    The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to unauthorized access due to a missing capability check when creating form styles in all versions up to, and including, 1.2.1. This makes it possible for authenticated attackers, wit…

    HashThemes Hash Form – Drag & Drop Form Builder Web / CMS
  • Medium 6.1
    CVE-2024-9417

    Hash Form - Drag & Drop Form Builder <= 1.1.9 - Unauthenticated Limited File Upload

    The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to limited file uploads due to a misconfigured file type validation in the 'handleUpload' function in all versions up to, and including, 1.1.9. This makes it possible for unauthentica…

    HashThemes Hash Form – Drag & Drop Form Builder Web / CMS