← All advisories

Critical severity9.8NVD Advisory· Published Aug 27, 2026

CVE-2026-78292

CVE-2026-78292

Description

Unauthenticated PHP Object Injection in Hash Form <= 1.4.1 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/Hash Forminferred2 versions
<=1.4.1+ 1 more
- (no CPE)range: <=1.4.1
- (no CPE)range: <=1.4.1
Package: https://wordpress.org/plugins/hash-form

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/hash-form/vulnerability/wordpress-hash-form-plugin-1-4-1-php-object-injection-vulnerabilitynvd

News mentions

0

No linked articles in our index yet.