CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-11-01
Kali Forms WordPress Plugin Broken Access Control Vulnerability (CVE-2026-107343): Unauthorized Email Sending and Spoofing
[Affected Scope] Kali Forms โ Contact Form & Drag-and-Drop Builder WordPress plugin before version 2.4.30
[Impact] Low-privileged authenticated users (such as Subscribers) can bypass capability checks to send arbitrary emails with spoofed sender addresses
[Mitigation] Immediately update the Kali Forms plugin to version 2.4.30 or later