Kali Forms — Contact Form & Drag-and-Drop Builder

Уязвимости

• CVE-2026-3584без авторизации≤ 2.4.9

  Kali Forms <= 2.4.9 - Unauthenticated Remote Code Execution via form_process

  Критич. 9.8

• CVE-2026-16144без авторизации≤ 2.4.20

  Kali Forms <= 2.4.20 - Unauthenticated Remote Code Execution via 'thisPermalink' Field Parameter

  Высокий 8.1

• CVE-2024-22305без авторизации≤ 2.3.36

  WordPress Contact Form builder with drag & drop - Kali Forms Plugin <= 2.3.36 is vulnerable to Insecure Direct Object References (IDOR)

  Высокий 8.1

• CVE-2026-59542подписчик+≤ 2.4.18

  WordPress Kali Forms plugin <= 2.4.18 - Arbitrary File Deletion vulnerability

  Высокий 7.7

• CVE-2026-15395без авторизации≤ 2.4.18

  Kali Forms <= 2.4.18 - Unauthenticated Stored Cross-Site Scripting via 'digitalSignature' Field Value

  Высокий 7.2

• CVE-2026-65446без авторизации · нужен клик≤ 2.4.18

  WordPress Kali Forms plugin <= 2.4.18 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2020-36720нужен вход→ 2.1.2

  Kali Forms <= 2.1.1 - Missing Authorization to Settings Update

  Высокий 7.1

• CVE-2023-45275нужен вход≤ 2.3.28

  WordPress Contact Form builder with drag & drop plugin <= 2.3.28 - Broken Access Control vulnerability

  Средний 6.5

• CVE-2026-9107участник+≤ 2.4.13

  Kali Forms <= 2.4.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'kaliforms_field_components' Parameter

  Средний 6.4

• CVE-2024-1218участник+≤ 2.3.41

  Contact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing Authorization

  Средний 5.4

• CVE-2026-81276без авторизации≤ 2.4.23

  WordPress Kali Forms plugin <= 2.4.23 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2023-46083без авторизации≤ 2.3.27

  WordPress Kali Forms plugin <= 2.3.27 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2024-1217подписчик+≤ 2.3.41

  Contact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing Authorization to Arbitrary Plugin Deactivation

  Средний 4.3

• CVE-2026-1860участник+≤ 2.4.8

  Kali Forms <= 2.4.8 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Form Data Exposure

  Средний 4.3