Read the docs

Kaliforms

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Kaliforms records in CISA KEV

No Kaliforms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Kali Forms 5 records MEDIUM Contact Form Builder 2 records LOW

Records

5 records in Kali Forms · all components

TI-2025-02800 CVE-2025-3201 · GHSA-qqv4-m5cq-pp99

Kali Forms < 2.4.3 - Contributor+ Stored XSS

Priority MEDIUM 60

The Contact Form builder with drag & drop for WordPress WordPress plugin before 2.4.3 does not sanitise and escape some of its settings, which could allow high privilege users such as contributors to perform Stored Cross…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00262 Published 2025-05-16 Fixed in 2.4.3 CWE-79
TI-2020-18883 CVE-2020-36712 · GHSA-gpgv-57wf-wgvj

Kali Forms <= 2.1.1 - Unauthenticated Arbitrary Post Deletion

Priority MEDIUM 45

The Kali Forms plugin for WordPress is vulnerable to Unauthenticated Arbitrary Post Deletion in versions up to, and including, 2.1.1.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00735 Published 2023-06-07 Fixed in 2.1.2 CWE-862
TI-2024-14892 CVE-2024-22305 · GHSA-2jf4-qrjv-8cx6

Authorization bypass in ali Forms Contact Form builder with drag & drop for WordPress…

Priority MEDIUM 42

Authorization Bypass Through User-Controlled Key vulnerability in ali Forms Contact Form builder with drag & drop for WordPress – Kali Forms.This issue affects Contact Form builder with drag & drop for WordPress – Kali F…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00453 Published 2024-01-31 No fix listed CWE-639
TI-2020-18888 CVE-2020-36717 · GHSA-v6g2-29p9-2r85

Kali Forms <= 2.1.1 - Cross-Site Request Forgery

Priority MEDIUM 41

The Kali Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1.1.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00478 Published 2023-06-07 Fixed in 2.1.2 CWE-352
TI-2020-18891 CVE-2020-36720 · GHSA-qpfj-j74j-7qq6

Kali Forms <= 2.1.1 - Missing Authorization to Settings Update

Priority LOW 33

The Kali Forms plugin for WordPress is vulnerable to Authenticated Options Change in versions up to, and including, 2.1.1.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00793 Published 2023-06-07 Fixed in 2.1.2 CWE-862
Open these records in search →