197 matches found
CVE-2026-3584
CVE-2026-3584 ā WordPress Kali Forms = 2.4.9 - Unauthenticated Remote Code Execution via formprocess š„ Vulnerability Summary The WordPress Kali Forms plugin versions = 2.4.9 contain a critical unauthenticated remote code execution RCE vulnerability. This flaw allows unauthenticated attackers to...
WordPress Kali Forms <= 2.4.9 - Remote Code Execution
Kali Forms WordPress plugin = 2.4.9 contains a remote code execution caused by unsafe user input handling in 'formprocess' and 'preparepostdata' functions, letting unauthenticated attackers execute code on the server, exploit requires no authentication. id: CVE-2026-3584 info: name: WordPress Kal...
CVE-2026-39782
Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kali Forms: from n/a through 2.4.27...
EUVD-2026-112914
Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kali Forms: from n/a through 2.4.27...
CVE-2026-39782
The Kaliforms Kali Forms WordPress plugin (versions
CVE-2026-39782 WordPress Kali Forms plugin <= 2.4.27 - Broken Access Control vulnerability
Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kali Forms: from n/a through 2.4.27...
CVE-2026-48196
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kaliforms Kali Forms kali-forms allows Stored XSS.This issue affects Kali Forms: from n/a through 2.4.27...
CVE-2026-42703
Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kali Forms: from n/a through 2.4.27...
EUVD-2026-112809
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kaliforms Kali Forms kali-forms allows Stored XSS.This issue affects Kali Forms: from n/a through 2.4.27...
CVE-2026-48196
The Kali Forms WordPress plugin (versions up to and including 2.4.27 ) is vulnerable to a Stored Cross-site Scripting (XSS) flaw. This issue arises from the Improper Neutralization of Input During Web Page Generation , allowing an attacker to inject malicious scripts that are stored on the server...
CVE-2026-48196 WordPress Kali Forms plugin <= 2.4.27 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kaliforms Kali Forms kali-forms allows Stored XSS.This issue affects Kali Forms: from n/a through 2.4.27...
WordPress Kali Forms plugin <= 2.4.27 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by mroccon in WordPress Plugin Kali Forms versions = 2.4.27...
CVE-2026-42703
The Kali Forms WordPress plugin (versions
CVE-2026-42703 WordPress Kali Forms plugin <= 2.4.27 - Broken Access Control vulnerability
Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kali Forms: from n/a through 2.4.27...
EUVD-2026-112803
Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kali Forms: from n/a through 2.4.27...
WordPress Kali Forms plugin <= 2.4.27 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Oly Hossen in WordPress Plugin Kali Forms versions = 2.4.27...
WordPress Kali Forms ā Contact Form & Drag-and-Drop Builder plugin < 2.4.17 - Unauthenticated Media Upload vulnerability
Unauthenticated Media Upload vulnerability discovered by Alexander Jurkschat in WordPress Plugin Kali Forms versions 2.4.17...
CVE-2026-81276
Unauthenticated Broken Access Control in Kali Forms = 2.4.23 versions...