Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Kaliforms Component: Contact Form Builder Clear all filters
TI-2024-01132 CVE-2024-1218 · GHSA-8725-j6gh-f5p8

Contact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing Authorization

Priority LOW 24

The Contact Form builder with drag & drop for WordPress – Kali Forms plugin for WordPress is vulnerable to unauthorized access and modification of data via API due to an inconsistent capability check on several REST endp…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00308 Published 2024-02-20 No fix listed CWE-862
TI-2024-01131 CVE-2024-1217 · GHSA-rp94-5jm7-95fv

Missing authorization in wpchill Kali Forms — Contact Form & Drag-and-Drop Builder

Priority LOW 33

The Contact Form builder with drag & drop for WordPress – Kali Forms plugin for WordPress is vulnerable to unauthorized plugin deactivation due to a missing capability check on the await_plugin_deactivation function in a…

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00306 Published 2024-02-20 No fix listed CWE-862