KA
Vendor
Kaliforms
10
CVEs
0
On KEV
3
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-39782 New | KF Kali Forms Kaliforms | 5.3 | Oct 29 | WordPress Kali Forms plugin <= 2.4.27 - Broken Access Control vulnerability |
| CVE-2026-48196 New | KF Kali Forms Kaliforms | 6.5 | Oct 29 | WordPress Kali Forms plugin <= 2.4.27 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-42703 New | KF Kali Forms Kaliforms | 6.5 | Oct 29 | WordPress Kali Forms plugin <= 2.4.27 - Broken Access Control vulnerability |
| CVE-2025-3201 | KF Kali Forms Kaliforms | 5.9 | May 16 | Kali Forms < 2.4.3 - Contributor+ Stored XSS |
| CVE-2024-1218 | CF Contact Form Builder Kaliforms | 5.4 | Feb 20 | Contact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing Authorization |
| CVE-2024-1217 | CF Contact Form Builder Kaliforms | 4.3 | Feb 20 | Contact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing Authorization to Arbitrary Plugin Deactivation |
| CVE-2024-22305 | KF Kali Forms Kaliforms | 8.1 | Jan 31 | WordPress Contact Form builder with drag & drop - Kali Forms Plugin <= 2.3.36 is vulnerable to Insecure Direct Object References (IDOR) |
| CVE-2020-36720 | KF Kali Forms Kaliforms | 7.1 | Jun 7 | The Kali Forms plugin for WordPress is vulnerable to Authenticated Options Change in versions up to, and including, 2.1.1 |
| CVE-2020-36717 | KF Kali Forms Kaliforms | 8.8 | Jun 7 | The Kali Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1.1 |
| CVE-2020-36712 | KF Kali Forms Kaliforms | 5.3 | Jun 7 | The Kali Forms plugin for WordPress is vulnerable to Unauthenticated Arbitrary Post Deletion in versions up to, and including, 2.1.1 |