kali-forms vulnerabilities

CVEs whose affected-version data names the kali-forms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

3 CVEsRSS

CVE-2026-39782Medium· 5.3

1w ago

WordPress Kali Forms plugin <= 2.4.27 - Broken Access Control vulnerability

Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kali Forms: from n/a through 2.4.27.

▾ SunlitKaliforms · kali-formsEPSS 0.26%via CVEORG

CVE-2026-42703Medium· 6.5

1w ago

WordPress Kali Forms plugin <= 2.4.27 - Broken Access Control vulnerability

Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kali Forms: from n/a through 2.4.27.

▾ SunlitKaliforms · kali-formsEPSS 0.27%via CVEORG

CVE-2026-48196Medium· 6.5

1w ago

WordPress Kali Forms plugin <= 2.4.27 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kaliforms Kali Forms kali-forms allows Stored XSS.This issue affects Kali Forms: from n/a through 2.4.27.

▾ SunlitKaliforms · kali-formsEPSS 0.17%via CVEORG