Kaliforms has 3 CVEs on record. 3 were published in the last 90 days. The busiest recent month was October 2026 with 3. The median CVSS is 6.5 (medium).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.5
- Publish → KEV
- —
- Last 90 days
- 3 prev 0
Worst active — by depth score
CVE-2026-48196Medium· 6.5WordPress Kali Forms plugin <= 2.4.27 - Cross Site Scripting (XSS) vulnerability36CVE-2026-42703Medium· 6.5WordPress Kali Forms plugin <= 2.4.27 - Broken Access Control vulnerability36CVE-2026-39782Medium· 5.3WordPress Kali Forms plugin <= 2.4.27 - Broken Access Control vulnerability29
Kaliforms vulnerabilities
CVEs affecting Kaliforms, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-39782Medium· 5.3WordPress Kali Forms plugin <= 2.4.27 - Broken Access Control vulnerability
Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kali Forms: from n/a through 2.4.27.
CVE-2026-42703Medium· 6.5WordPress Kali Forms plugin <= 2.4.27 - Broken Access Control vulnerability
Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kali Forms: from n/a through 2.4.27.
CVE-2026-48196Medium· 6.5WordPress Kali Forms plugin <= 2.4.27 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kaliforms Kali Forms kali-forms allows Stored XSS.This issue affects Kali Forms: from n/a through 2.4.27.