Skip to contentWpchill Kali Forms — Contact Form & Drag-and-drop Builder vulnerabilities
- unknown kali forms — contact form & drag-and-drop builderKali Forms < 2.4.29 - Author+ Stored XSS via Button Click ActionCVE-2026-1066496.8 Medium
- unknown kali forms — contact form & drag-and-drop builderKali Forms < 2.4.30 - Subscriber+ Email Sending and Sender SpoofingCVE-2026-1073434.3 Medium
- unknown kali forms — contact form & drag-and-drop builderKali Forms < 2.4.30 - Subscriber+ User Email Address DisclosureCVE-2026-1073424.3 Medium
- wpchill kali forms — contact form & drag-and-drop builderKali Forms <= 2.4.20 - Unauthenticated Remote Code Execution via 'thisPermalink' Field ParameterCVE-2026-161448.1 High
- wpchill kali forms — contact form & drag-and-drop builderKali Forms <= 2.4.18 - Unauthenticated Stored Cross-Site Scripting via 'digitalSignature' Field ValueCVE-2026-153957.2 High
- unknown kali forms — contact form & drag-and-drop builderKali Forms < 2.4.17 - Contributor+ Arbitrary Post Metadata Disclosure via IDORCVE-2026-115805.5 Medium
- unknown kali forms — contact form & drag-and-drop builderKali Forms < 2.4.17 - Unauthenticated Media UploadCVE-2026-115795.3 Medium
- wpchill kali forms — contact form & drag-and-drop builderKali Forms <= 2.4.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'kaliforms_field_components' ParameterCVE-2026-91076.4 Medium
- unknown kali forms — contact form & drag-and-drop builderKali Forms < 2.4.13 - Contributor+ Stored XSS via Form Field CaptionCVE-2026-115815.9 Medium
- wpchill kali forms — contact form & drag-and-drop builderKali Forms <= 2.4.9 - Unauthenticated Remote Code Execution via form_processCVE-2026-3584Public exploit9.8 Critical
- wpchill kali forms — contact form & drag-and-drop builderKali Forms <= 2.4.8 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Form Data ExposureCVE-2026-18604.3 Medium
- kaliforms contact form builder, wpchill kali forms — contact form & drag-and-drop builder +1 moreContact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing AuthorizationCVE-2024-12184.3 Medium
- kaliforms contact form builder, wpchill kali forms — contact form & drag-and-drop builder +1 moreContact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing Authorization to Arbitrary Plugin DeactivationCVE-2024-12177.6 High
- kaliforms kali forms, wpchill kali forms — contact form & drag-and-drop builder +1 moreKali Forms <= 2.1.1 - Cross-Site Request ForgeryCVE-2020-367178.8 High
- kaliforms kali forms, wpchill kali forms — contact form & drag-and-drop builder +1 moreKali Forms <= 2.1.1 - Missing Authorization to Settings UpdateCVE-2020-367207.1 High
- kaliforms kali forms, wpchill kali forms — contact form & drag-and-drop builder +1 moreKali Forms <= 2.1.1 - Unauthenticated Arbitrary Post DeletionCVE-2020-367128.6 High