Kaliforms vulnerabilities and threats

3 threats

Severity	CVSS	Threat	Source	Published
Medium	5.3	CVE-2026-39782Kali Forms (WordPress plugin) · Missing Authorization Medium5.32026-10-29CVE Database V5CVE-2026-39782 CVE-2026-39782 is a Missing Authorization vulnerability in Kali Forms (Kaliforms) affecting versions from initial through 2.4.27. It allows exploitation due to incorrectly configured access control security levels. The vulnerability has a medium severity with a CVSS score of 5.3 and is fixed in version 2.4.28. Vulnerability Kaliforms	CVE Database V5	2026-10-29
Medium	6.5	CVE-2026-48196Kali Forms (WordPress plugin) · Cross-site Scripting Medium6.52026-10-29CVE Database V5CVE-2026-48196 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kaliforms Kali Forms kali-forms allows Stored XSS.This issue affects Kali Forms: from n/a through 2.4.27. Vulnerability Kaliforms	CVE Database V5	2026-10-29
Medium	6.5	CVE-2026-42703Kali Forms (WordPress plugin) · Missing Authorization Medium6.52026-10-29CVE Database V5CVE-2026-42703 Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kali Forms: from n/a through 2.4.27. Vulnerability Kaliforms	CVE Database V5	2026-10-29

Page 1 of 1