Skip to content
Threat Feed
Subscribe

Vendor

Hash Form

1 brief RSS
critical advisory

Unauthenticated RCE in Hash Form Plugin for WordPress

An unauthenticated arbitrary file upload vulnerability (CVE-2026-81780) in the Hash Form WordPress plugin allows attackers to achieve remote code execution through the 'admin-ajax.php' endpoint.

Hash Form wordpress arbitrary-file-upload rce webserver
1r 2t 1c