Vulnerabilities > Hashthemes > Hash Form > 1.1.6
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-12-12 | CVE-2024-12201 | Missing Authorization vulnerability in Hashthemes Hash Form The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to unauthorized access due to a missing capability check when creating form styles in all versions up to, and including, 1.2.1. | 4.3 |
| 2024-10-05 | CVE-2024-9417 | Unrestricted Upload of File with Dangerous Type vulnerability in Hashthemes Hash Form The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to limited file uploads due to a misconfigured file type validation in the 'handleUpload' function in all versions up to, and including, 1.1.9. | 6.1 |