CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Kali Forms WordPress Plugin Broken Access Control Vulnerability (CVE-2026-107343): Unauthorized Email Sending and Spoofing
[Affected Scope] Kali Forms โ Contact Form & Drag-and-Drop Builder WordPress plugin before version 2.4.30
[Impact] Low-privileged authenticated users (such as Subscribers) can bypass capability checks to send arbitrary emails with spoofed sender addresses
[Mitigation] Immediately update the Kali Forms plugin to version 2.4.30 or later
Kali Forms WordPress Plugin Information Disclosure Vulnerability via Missing Capability Check (CVE-2026-107342)
[Affected Scope] Kali Forms โ Contact Form & Drag-and-Drop Builder WordPress plugin before version 2.4.30
[Impact] Authenticated users with minimal privileges (Subscriber and above) can disclose the email address of any registered user, including administrators
[Mitigation] Immediately update the Kali Forms plugin to version 2.4.30 or later