Description
Unauthenticated Cross Site Request Forgery (CSRF) in Hash Form <= 1.4.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HashThemes | Hash Form | ≤ 1.4.0 | — |
Medium · 4.3
CVE-2026-78280
EUVD-2026-64787GHSA-gxfw-xx48-f69w
WordPress Hash Form plugin <= 1.4.0 - Cross Site Request Forgery (CSRF) vulnerability
Published Aug 24, 2026 · Updated Aug 24, 2026 · Assigned by Patchstack