Skip to content
OpenAdvisories
High · 7.5 CVE-2024-22305 EUVD-2024-19866GHSA-2jf4-qrjv-8cx6

WordPress Contact Form builder with drag & drop - Kali Forms Plugin <= 2.3.36 is vulnerable to Insecure Direct Object References (IDOR)

Published Jan 31, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: ali Forms Product: Contact Form builder with drag & drop for WordPress – Kali Forms Category: Web / CMS

Description

Authorization Bypass Through User-Controlled Key vulnerability in ali Forms Contact Form builder with drag & drop for WordPress – Kali Forms.This issue affects Contact Form builder with drag & drop for WordPress – Kali Forms: from n/a through 2.3.36.

Affected products

VendorProductAffectedFixed
ali Forms Contact Form builder with drag & drop for WordPress – Kali Forms ≤ 2.3.36 —

References