CVE-2024-5084 : The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to

The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'file_upload_action' function in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

Published 2024-05-23 14:31:39

Updated 2025-02-27 13:30:58

Source Wordfence

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2024-5084

Hashthemes » Hash Form » For Wordpress
Versions before (<) 1.1.1
cpe:2.3:a:hashthemes:hash_form:*:*:*:*:*:wordpress:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2024-5084

EPSS FAQ

90.77%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 100 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2024-5084

WordPress Hash Form Plugin RCE

Disclosure Date: 2024-05-23

First seen: 2024-06-05

exploit/multi/http/wp_hash_form_rce

Authors: - Francesco Carlucci - Valentin Lobstein

More information

CVSS scores for CVE-2024-5084

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	N/A	N/A	Wordfence	2024-05-23
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	Wordfence	2024-05-23
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2024-5084

CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2024-5084

https://plugins.trac.wordpress.org/browser/hash-form/trunk/admin/classes/HashFormBuilder.php#L764

HashFormBuilder.php in hash-form/trunk/admin/classes – WordPress Plugin Repository
Product
https://plugins.trac.wordpress.org/changeset/3090341/

429 Too Many Requests
Patch

CVEs referencing this url
https://www.wordfence.com/threat-intel/vulnerabilities/id/eef9e2fa-d8f0-42bf-95ac-ee4cafff0b14?source=cve

Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution
Third Party Advisory

Jump to