WordPress plugin
Hash Elements security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 5 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium5
- Low0
All Hash Elements vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Authenticated (Contributor+) Information Exposure ≤1.5.4Update to 1.5.5 | CVE-2026-24618 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.5.0Update to 1.5.1 | CVE-2025-22296 | |
| Medium5.3 | Missing Authorization to Unauthenticated Draft Post Title Exposure ≤1.4.7Update to 1.4.8 | CVE-2024-10802 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter in Multiple Widgets ≤1.3.8Update to 1.3.9 | CVE-2024-5177 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.3.3Update to 1.3.4 | CVE-2024-30426 |
- Medium4.3Authenticated (Contributor+) Information Exposure
≤1.5.4Update to 1.5.5
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.5.0Update to 1.5.1
- Medium5.3Missing Authorization to Unauthenticated Draft Post Title Exposure
≤1.4.7Update to 1.4.8
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter in Multiple Widgets
≤1.3.8Update to 1.3.9
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.3.3Update to 1.3.4
Hash Elements: common questions
Does Hash Elements have known vulnerabilities?
Yes. VulnCrest Radar lists 5 known vulnerabilities in Hash Elements: 5 medium. None are known to affect version null.
How do I check which version of Hash Elements I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Hash Elements vulnerability?
CVE-2026-24618, published Jun 12, 2026: Hash Elements <= 1.5.4 - Authenticated (Contributor+) Information Exposure. Severity: Medium (CVSS 4.3).
Is any Hash Elements vulnerability listed in CISA KEV?
No. None of the known Hash Elements vulnerabilities is currently listed in the CISA KEV catalog.