PatchTheCVEhash form vulnerabilities and fixes
Recent CVEs affecting hash form, with upgrade or downgrade steps. 2 tracked.
Also searched as: hashform.
hash form has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-12-12. Highest priority: CVE-2024-9417 (score 29/100).
- CVE-2024-9417 MEDIUM 6.1 UPGRADE The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to limited file uploads due to a m
- CVE-2024-12201 MEDIUM 4.3 UPGRADE The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to unauthorized access due to a mi
FAQ
How do I fix hash form vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is hash form being exploited right now?
None of the tracked hash form CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which hash form CVE should I patch first?
CVE-2024-9417 currently ranks highest (29/100): The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to limited file uploads due to a m.