CVE-2026-3584

CVE-2026-3584 – WordPress Kali Forms = 2.4.9 - formprocess를 통한 인증되지 않은 원격 코드 실행 🔥 취약점 요약 WordPress 플러그인 Kali Forms 버전 = 2.4.9에는 치명적인 인증되지 않은 원격 코드 실행RCE 취약점이 존재합니다. 이 결함으로 인해 인증되지 않은 공격자 는 인가 검사 없이 공개적으로 노출된 AJAX 엔드포인트 kaliformsformprocess를 통해 서버에서 임의의 PHP 코드를 실행하고 완전한 관리자 권한 을 획득할 수 있습니다. 이 취약점은...

EUVD-2026-13814

The Kali Forms plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.4.9 via the 'formprocess' function. This is due to the 'preparepostdata' function mapping user-supplied keys directly into internal placeholder storage, combined with the use of...

CVE-2026-3584: Improper Control of Generation of Code

The Kali Forms plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.4.9 via the 'formprocess' function. This is due to the 'preparepostdata' function mapping user-supplied keys directly into internal placeholder storage, combined with the use of...

VulnCheck KEV: CVE-2026-3584

The Kali Forms plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.4.9 via the 'formprocess' function. This is due to the 'preparepostdata' function mapping user-supplied keys directly into internal placeholder storage, combined with the use of...