Product by WPChill
Kali Forms — Contact Form & Drag-and-drop Builder
10 known vulnerabilities in Kali Forms — Contact Form & Drag-and-drop Builder (WPChill), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-3584 | Kali Forms <= 2.4.9 - Unauthenticated Remote Code Execution via form_process | 9.8 | |
| High | CVE-2026-16144 | Kali Forms <= 2.4.20 - Unauthenticated Remote Code Execution via 'thisPermalink' Field Parameter | 8.1 | |
| High | CVE-2020-36712 | Kali Forms <= 2.1.1 - Unauthenticated Arbitrary Post Deletion | 8.6 | |
| High | CVE-2026-15395 | WPChill Kali Forms: Cross-site Scripting | 7.2 | |
| High | CVE-2020-36720 | Kali Forms <= 2.1.1 - Missing Authorization to Settings Update | 7.1 | |
| Medium | CVE-2026-9107 | WPChill Kali Forms: Cross-site Scripting | 6.4 | |
| High | CVE-2020-36717 | Kali Forms <= 2.1.1 - Cross-Site Request Forgery | 8.8 | |
| High | CVE-2024-1217 | WPChill Kali Forms: Missing Authorization | 7.6 | |
| Medium | CVE-2026-1860 | WPChill Kali Forms: Missing Authorization | 4.3 | |
| Medium | CVE-2024-1218 | Contact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing Authorization | 4.3 |