Login Request a demo
KF
Product
Kali Forms
by Kaliforms · last CVE Oct 29, 2026
8
CVEs
0
On KEV
8.8
Max CVSS
3
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 3Medium 5Low 0
Severity
All severities8Critical0High3Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Kali Forms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-36717
8.8
0%
Jun 7
The Kali Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1.1
Affected: through 2.1.1
CVE-2024-22305
8.1
0%
Jan 31
WordPress Contact Form builder with drag & drop - Kali Forms Plugin <= 2.3.36 is vulnerable to Insecure Direct Object References (IDOR)
Affected: before 2.3.37
CVE-2020-36720
7.1
1%
Jun 7
The Kali Forms plugin for WordPress is vulnerable to Authenticated Options Change in versions up to, and including, 2.1.1
Affected: through 2.1.1
CVE-2026-48196
New
6.5–Oct 29
WordPress Kali Forms plugin <= 2.4.27 - Cross Site Scripting (XSS) vulnerability
Affected: through 2.4.27
CVE-2026-42703
New
6.5–Oct 29
WordPress Kali Forms plugin <= 2.4.27 - Broken Access Control vulnerability
Affected: through 2.4.27
CVE-2025-3201
5.9
0%
May 16
Kali Forms < 2.4.3 - Contributor+ Stored XSS
Affected: before 2.4.3
CVE-2026-39782
New
5.3–Oct 29
WordPress Kali Forms plugin <= 2.4.27 - Broken Access Control vulnerability
Affected: through 2.4.27
CVE-2020-36712
5.3
1%
Jun 7
The Kali Forms plugin for WordPress is vulnerable to Unauthenticated Arbitrary Post Deletion in versions up to, and including, 2.1.1
Affected: through 2.1.1
Showing 8