Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Kaliforms Component: Kali Forms Clear all filters
TI-2025-02800 CVE-2025-3201 · GHSA-qqv4-m5cq-pp99

Kali Forms < 2.4.3 - Contributor+ Stored XSS

Priority MEDIUM 60

The Contact Form builder with drag & drop for WordPress WordPress plugin before 2.4.3 does not sanitise and escape some of its settings, which could allow high privilege users such as contributors to perform Stored Cross…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00262 Published 2025-05-16 Fixed in 2.4.3 CWE-79
TI-2024-14892 CVE-2024-22305 · GHSA-2jf4-qrjv-8cx6

Authorization bypass in ali Forms Contact Form builder with drag & drop for WordPress…

Priority MEDIUM 42

Authorization Bypass Through User-Controlled Key vulnerability in ali Forms Contact Form builder with drag & drop for WordPress – Kali Forms.This issue affects Contact Form builder with drag & drop for WordPress – Kali F…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00453 Published 2024-01-31 No fix listed CWE-639
TI-2020-18888 CVE-2020-36717 · GHSA-v6g2-29p9-2r85

Kali Forms <= 2.1.1 - Cross-Site Request Forgery

Priority MEDIUM 41

The Kali Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1.1.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00478 Published 2023-06-07 Fixed in 2.1.2 CWE-352
TI-2020-18891 CVE-2020-36720 · GHSA-qpfj-j74j-7qq6

Kali Forms <= 2.1.1 - Missing Authorization to Settings Update

Priority LOW 33

The Kali Forms plugin for WordPress is vulnerable to Authenticated Options Change in versions up to, and including, 2.1.1.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00793 Published 2023-06-07 Fixed in 2.1.2 CWE-862
TI-2020-18883 CVE-2020-36712 · GHSA-gpgv-57wf-wgvj

Kali Forms <= 2.1.1 - Unauthenticated Arbitrary Post Deletion

Priority MEDIUM 45

The Kali Forms plugin for WordPress is vulnerable to Unauthenticated Arbitrary Post Deletion in versions up to, and including, 2.1.1.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00735 Published 2023-06-07 Fixed in 2.1.2 CWE-862