CVE-2026-78292

LLM-synthesized narrative grounded in this CVE's description and references.

• WordPress/Hash Forminferred2 versions

  <=1.4.1+ 1 more

  • (no CPE)range: <=1.4.1
  • (no CPE)range: <=1.4.1

  Package: https://wordpress.org/plugins/hash-form

• patchstack.com/database/wordpress/plugin/hash-form/vulnerability/wordpress-hash-form-plugin-1-4-1-php-object-injection-vulnerabilitynvd

• Wordfence Intelligence Weekly WordPress Vulnerability Report (August 24, 2026 to August 30, 2026)
  Wordfence Blog · Sep 3, 2026
• WordPress: 25 Plugin Vulnerabilities Including Critical RCE Disclosed in Single Batch
  Vypr Intelligence · Aug 28, 2026