Medium
CVE-2026-81276
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 20
Reset filters
High
CVE-2026-16144
Kali Forms <= 2.4.20 - Unauthenticated Remote Code Execution via 'thisPermalink' Field Parameter
High
CVE-2026-65446
Kali Forms <= 2.4.18 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-59542
Kali Forms — Contact Form & Drag-and-Drop Builder <= 2.4.18 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2026-15395
Kali Forms <= 2.4.18 - Unauthenticated Stored Cross-Site Scripting via 'digitalSignature' Field Value
Medium
CVE-2026-9107
Kali Forms <= 2.4.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'kaliforms_field_components' Parameter
Medium
CVE-2026-11579
Kali Forms <= 2.4.16 - Missing Authorization to Unauthenticated Media File Upload
Medium
CVE-2026-11580
Kali Forms <= 2.4.16 - Authenticated (Contributor+) Insecure Direct Object Reference to Post Metadata Disclosure
Medium
CVE-2026-11581
Kali Forms <= 2.4.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2026-3584
Kali Forms <= 2.4.9 - Unauthenticated Remote Code Execution via form_process
Medium
CVE-2026-1860
Kali Forms <= 2.4.8 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Form Data Exposure
Medium
CVE-2025-3201
Contact Form builder with drag & drop for WordPress – Kali Forms <= 2.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1218
Contact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing Authorization
High
CVE-2024-1217
Contact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing Authorization to Arbitrary Plugin Deactivation
Medium
CVE-2024-22305
Contact Form builder with drag & drop - Kali Forms <= 2.3.36 - Insecure Direct Object Reference
Medium
CVE-2023-46083
Contact Form builder with drag & drop - Kali Forms <= 2.3.27 - Missing Authorization via Contact Form
Medium
CVE-2023-45275
Contact Form builder with drag & drop - Kali Forms <= 2.3.28 - Missing Authorization via get_log
High
CVE-2020-36717
Kali Forms <= 2.1.1 - Cross-Site Request Forgery
High
CVE-2020-36720
Kali Forms <= 2.1.1 - Missing Authorization to Settings Update
High
CVE-2020-36712
Kali Forms <= 2.1.1 - Unauthenticated Arbitrary Post Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.