WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
kali-forms
Published
2023-10-16
Title
Contact Form builder with drag & drop - Kali Forms < 2.3.28 - Missing Authorization via Contact Form
Slug
kali-forms
Published
2024-01-17
Title
Contact Form builder with drag & drop - Kali Forms < 2.3.37 - Insecure Direct Object Reference
Slug
kali-forms
Published
2024-02-19
Title
Contact Form builder with drag & drop for WordPress – Kali Forms < 2.3.42 - Missing Authorization to Arbitrary Plugin Deactivation
Slug
kali-forms
Published
2024-02-19
Title
Contact Form builder with drag & drop for WordPress – Kali Forms < 2.3.42 - Missing Authorization
Slug
kali-forms
Published
2025-04-25
Title
Kali Forms < 2.4.3 - Contributor+ Stored XSS
Slug
kali-forms
Published
2026-02-17
Title
Kali Forms < 2.4.9 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Form Data Exposure
Slug
kali-forms
Published
2026-03-20
Title
Kali Forms < 2.4.10 - Unauthenticated Remote Code Execution via form_process
Slug
kali-forms
Published
2026-06-30
Title
Kali Forms < 2.4.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'kaliforms_field_components' Parameter
Slug
kali-forms
Published
2026-06-09
Title
Kali Forms < 2.4.13 - Contributor+ Stored XSS via Form Field Caption
Slug
kali-forms
Published
2026-06-24
Title
Kali Forms < 2.4.17 - Unauthenticated Media Upload
Slug
kali-forms
Published
2026-06-24
Title
Kali Forms < 2.4.17 - Contributor+ Arbitrary Post Metadata Disclosure via IDOR
Slug
kali-forms
Published
2026-07-16
Title
Kali Forms < 2.4.19 - Unauthenticated Stored Cross-Site Scripting via 'digitalSignature' Field Value
Slug
kalrav-ai-agent
Published
2026-01-23
Title
Kalrav AI Agent <= 2.3.3 - Unauthenticated Arbitrary File Upload via kalrav_upload_file AJAX Action
Slug
kama-clic-counter
Published
2017-02-27
Title
Kama Click Counter < 3.5.0 - Authenticated Blind SQL Injection
Slug
kama-clic-counter
Published
2017-02-27
Title
Kama Click Counter < 3.5.0 - XSS
Slug
kama-clic-counter
Published
2025-06-12
Title
Kama Click Counter < 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
kama-clic-counter
Published
2025-09-22
Title
Kama Click Counter < 4.1.0 - Contributor+ Stored XSS
Slug
kama-spamblock
Published
2024-10-15
Title
Kama SpamBlock < 1.8.3 - Reflected Cross-Site Scripting
Slug
kama-thumbnail
Published
2026-01-26
Title
Kama Thumbnail <= 3.5.1 - Cross-Site Request Forgery
Slug
kanban
Published
2023-03-20
Title
Kanban Boards for WordPress <= 2.5.20 - Admin+ Stored Cross-Site Scripting
Slug
kanban
Published
2023-06-02
Title
Kanban Boards for WordPress < 2.5.21 - Admin+ Stored XSS
Slug
kanban
Published
2023-06-08
Title
Kanban Boards for WordPress < 2.5.21 - Admin+ Stored XSS
Slug
kanban
Published
2024-03-29
Title
Kanban Boards for WordPress <= 2.5.21 - Reflected Cross-Site Scripting
Slug
kanban
Published
2024-06-21
Title
Kanban Boards for WordPress <= 2.5.21 - Missing Authorization
Slug
kangu
Published
2023-08-11
Title
Kangu para WooCommerce < 2.2.10 - Reflected XSS