Live › vulnerability › CVE-2026-42703
Kali Forms, a WordPress form plugin, has a missing authorization check that lets some users reach functions they should not. The sources do not say what data or actions an attacker gets beyond that.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 13:25 UTC. All times on this page are UTC.
Sites running the Kali Forms WordPress plugin at version 2.4.27 or earlier. The sources do not describe which roles or settings are needed to trigger the flaw, so whether a logged-out visitor can exploit it is unknown.
No product ranges from the sources yet.
2.4.27.2.4.27 (the sources do not name the fixed version).Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kali Forms: from n/a through 2.4.27.
This page as .md · .json · in your agent: get_signal("CVE-2026-42703")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.