What’s Vulnerable › Products
wpchill Kali Forms — Contact Form & Drag-and-Drop Builder vulnerabilities
10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.
Check whether your wpchill Kali Forms — Contact Form & Drag-and-Drop Builder version is affected
Latest wpchill Kali Forms — Contact Form & Drag-and-Drop Builder vulnerabilities
- CVE-2026-16144 — Kali Forms <= 2.4.20 - Unauthenticated Remote Code Execution via 'thisPermalink' Field Parameter (CVSS 8.1)
- CVE-2026-15395 — Kali Forms <= 2.4.18 - Unauthenticated Stored Cross-Site Scripting via 'digitalSignature' Field Value (CVSS 7.2)
- CVE-2026-9107 — Kali Forms <= 2.4.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'kaliforms_field_components' Parameter (CVSS 6.4)
- CVE-2026-3584 — Kali Forms <= 2.4.9 - Unauthenticated Remote Code Execution via form_process (CVSS 9.8)
- CVE-2026-1860 — Kali Forms <= 2.4.8 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Form Data Exposure (CVSS 4.3)
- CVE-2025-3201 — Kali Forms < 2.4.3 - Contributor+ Stored XSS (CVSS 5.9)
- CVE-2024-22305 — WordPress Contact Form builder with drag & drop - Kali Forms Plugin <= 2.3.36 is vulnerable to Insecure Direct Object References (IDOR) (CVSS 8.1)
- CVE-2020-36720 — Kali Forms <= 2.1.1 - Missing Authorization to Settings Update (CVSS 7.1)
- CVE-2020-36717 — Kali Forms <= 2.1.1 - Cross-Site Request Forgery (CVSS 8.8)
- CVE-2020-36712 — Kali Forms <= 2.1.1 - Unauthenticated Arbitrary Post Deletion (CVSS 5.3)