Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: wpchill Kali Forms — Contact Form & Drag-and-Drop Builder 2.1.2 Clear all filters
TI-2020-18888 CVE-2020-36717 · GHSA-v6g2-29p9-2r85

Kali Forms <= 2.1.1 - Cross-Site Request Forgery

Priority MEDIUM 41

The Kali Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1.1.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00478 Published 2023-06-07 Fixed in 2.1.2 CWE-352
TI-2020-18891 CVE-2020-36720 · GHSA-qpfj-j74j-7qq6

Kali Forms <= 2.1.1 - Missing Authorization to Settings Update

Priority LOW 33

The Kali Forms plugin for WordPress is vulnerable to Authenticated Options Change in versions up to, and including, 2.1.1.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00793 Published 2023-06-07 Fixed in 2.1.2 CWE-862
TI-2020-18883 CVE-2020-36712 · GHSA-gpgv-57wf-wgvj

Kali Forms <= 2.1.1 - Unauthenticated Arbitrary Post Deletion

Priority MEDIUM 45

The Kali Forms plugin for WordPress is vulnerable to Unauthenticated Arbitrary Post Deletion in versions up to, and including, 2.1.1.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00735 Published 2023-06-07 Fixed in 2.1.2 CWE-862