| CVE-2026-106649 |
Kali Forms < 2.4.29 - Author+ Stored XSS via Button Click Action
|
6.8
Medium
|
Nov 4, 2026 |
| CVE-2026-107342 |
The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.30 does not perform a capability check…
|
4.3
Medium
|
Nov 1, 2026 |
| CVE-2026-107343 |
The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.30 does not perform a capability check…
|
4.3
Medium
|
Nov 1, 2026 |
| CVE-2026-11579 |
The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.17 does not verify that a file…
|
5.3
Medium
|
Jul 15, 2026 |
| CVE-2026-11580 |
The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.17 does not perform a per-object…
|
5.5
Medium
|
Jul 15, 2026 |
| CVE-2026-11581 |
The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.13 does not sanitise a form field's…
|
5.9
Medium
|
Jun 30, 2026 |