Hash Form – Drag & Drop Form Builder

Vulnerabilities 8Slug hash-formLatest version 1.4.7WordPress.org →

Minimum safe version

1.4.3

Update to 1.4.3 or later to address 8 fixable vulnerabilities

Latest available1.4.7 ✓
Critical 10.0
2026-08-31< 1.4.3

CVE-2026-81780

CVEWordfence
Critical 9.8
2026-08-28< 1.4.2

Hash Form – Drag & Drop Form Builder <= 1.4.1 - Unauthenticated PHP Object Injection

WordfenceCVE
Medium 6.1
2024-10-07< 1.2.0

WordPress Hash Form Plugin <= 1.1.9 is vulnerable to Arbitrary File Upload

PatchstackCVEWordfence
Critical 9.8
2024-05-24< 1.1.1

WordPress Hash Form – Drag & Drop Form Builder Plugin <= 1.1.0 is vulnerable to PHP Object Injection

PatchstackCVEWordfence
Critical 9.8
2024-05-24< 1.1.1

WordPress Hash Form – Drag & Drop Form Builder Plugin <= 1.1.0 is vulnerable to Remote Code Execution (RCE)

PatchstackCVEWordfence