Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2571▼ 296 respecto a la semana anterior
Críticas / altas1355▲ 107 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior
8 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Crítica (10) | 0.52% | — | Hashthemes Hash FormAI | 31/8/2026 | 1/9/2026 | Unauthenticated Arbitrary File Upload in Hash Form <= 1.4.2 versions. | |
| Aplazada | Crítica (9.8) | 0.56% | — | Hashthemes Hash FormAI | 27/8/2026 | 28/8/2026 | Unauthenticated PHP Object Injection in Hash Form <= 1.4.1 versions. | |
| Aplazada | Media (4.3) | 0.14% | — | Hashthemes Hash FormAI | 24/8/2026 | 24/8/2026 | Unauthenticated Cross Site Request Forgery (CSRF) in Hash Form <= 1.4.0 versions. | |
| Aplazada | Media (4.3) | 0.17% | — | Hashthemes Hash FormAI | 7/5/2025 | 17/6/2026 | Cross-Site Request Forgery (CSRF) vulnerability in hashthemes Hash Form hash-form allows Cross Site Request Forgery.This issue affects Hash Form: from n/a through <= 1.2.8. | |
| Analizada | Media (4.3) | 0.38% | — | Hashthemes Hash Form | 12/12/2024 | 17/6/2026 | The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to unauthorized access due to a missing capability check when creating form styles in all versions up to, and including, 1.2.1. This makes it possible for authenticated attackers, with Contributor-level access and above, to create new form… | |
| Analizada | Media (6.1) | 0.37% | — | Hashthemes Hash Form | 5/10/2024 | 17/6/2026 | The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to limited file uploads due to a misconfigured file type validation in the 'handleUpload' function in all versions up to, and including, 1.1.9. This makes it possible for unauthenticated attackers to upload files that are excluded from both… | |
| Modificada | Crítica (9.8) | 0.78% | — | Hashthemes Hash Form | 23/5/2024 | 17/6/2026 | The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.1.0 via deserialization of untrusted input in the 'process_entry' function. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is… | |
| Modificada | Crítica (9.8) | 51% | — | Hashthemes Hash Form | 23/5/2024 | 17/6/2026 | The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'file_upload_action' function in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected… |