Exploit for CVE-2026-81780

cve · 2026-08-31

Description

Unauthenticated arbitrary file upload in WordPress Hash Form plugin up to 1.4.2.

10.0

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

0.3%higher than 21.2% of all CVEs

Updated 2026-09-07

Modified:2026-09-01 20:48

Last Seen:2026-09-02 08:26

Reporter:Patchstack

MARKDOWN2 lines

## https://sploitus.com/exploit?id=CVE-2026-81780
Unauthenticated Arbitrary File Upload in Hash Form <= 1.4.2 versions.