Kaliforms records
7 published records for vendor kaliforms.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 71.4%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-862 Missing Authorization4
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2020-36717No exploit | Kali Forms <= 2.1.1 - Cross-Site Request Forgerykaliforms · kali forms · CWE-352 | High8.8 | — | 0.4% | Jun 6, 2023 |
32Monitor | CVE-2024-22305No exploit | WordPress Contact Form builder with drag & drop - Kali Forms Plugin <= 2.3.36 is vulnerable to Insecure Direct Object References (IDOR)kaliforms · kali forms · CWE-639 | High8.1 | — | 0.4% | Jan 31, 2024 |
28Monitor | CVE-2020-36720No exploit | Kali Forms <= 2.1.1 - Missing Authorization to Settings Updatekaliforms · kali forms · CWE-862 | High7.1 | — | 0.7% | Jun 6, 2023 |
23Monitor | CVE-2025-3201No exploit | Kali Forms < 2.4.3 - Contributor+ Stored XSSkaliforms · kali forms · CWE-79 | Medium5.9 | — | 0.2% | May 16, 2025 |
21Monitor | CVE-2020-36712No exploit | Kali Forms <= 2.1.1 - Unauthenticated Arbitrary Post Deletionkaliforms · kali forms · CWE-862 | Medium5.3 | — | 0.7% | Jun 6, 2023 |
21Monitor | CVE-2024-1218No exploit | Contact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing Authorizationkaliforms · contact form builder · CWE-862 | Medium5.4 | — | 0.3% | Feb 28, 2024 |
17Monitor | CVE-2024-1217No exploit | Contact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing Authorization to Arbitrary Plugin Deactivationkaliforms · contact form builder · CWE-862 | Medium4.3 | — | 0.3% | Feb 28, 2024 |
- CVE-2020-3671735Monitor
Kali Forms <= 2.1.1 - Cross-Site Request Forgery
HighCVSS 8.8No exploitEPSS 0%kaliforms · kali formsJun 6, 2023
- CVE-2024-2230532Monitor
WordPress Contact Form builder with drag & drop - Kali Forms Plugin <= 2.3.36 is vulnerable to Insecure Direct Object References (IDOR)
HighCVSS 8.1No exploitEPSS 0%kaliforms · kali formsJan 31, 2024
- CVE-2020-3672028Monitor
Kali Forms <= 2.1.1 - Missing Authorization to Settings Update
HighCVSS 7.1No exploitEPSS 0%kaliforms · kali formsJun 6, 2023
- CVE-2025-320123Monitor
Kali Forms < 2.4.3 - Contributor+ Stored XSS
MediumCVSS 5.9No exploitEPSS 0%kaliforms · kali formsMay 16, 2025
- CVE-2020-3671221Monitor
Kali Forms <= 2.1.1 - Unauthenticated Arbitrary Post Deletion
MediumCVSS 5.3No exploitEPSS 0%kaliforms · kali formsJun 6, 2023
- CVE-2024-121821Monitor
Contact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing Authorization
MediumCVSS 5.4No exploitEPSS 0%kaliforms · contact form builderFeb 28, 2024
- CVE-2024-121717Monitor
Contact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing Authorization to Arbitrary Plugin Deactivation
MediumCVSS 4.3No exploitEPSS 0%kaliforms · contact form builderFeb 28, 2024