CVE-2026-125448: WordPress Kali Forms plugin <= 2.4.31 - Broken Access Control vulnerability

Q: Which Kali Forms versions are affected?

The issue affects Kali Forms through version 2.4.31. The available data does not identify the first affected version.

Q: Does exploitation require authentication or user interaction?

No. The CVSS vector indicates that exploitation can be performed remotely without privileges or user interaction, and has low attack complexity.

Q: What is the expected security impact?

The reported impact is limited to integrity, with no stated confidentiality or availability impact. The CVSS base score is 5.3, rated medium.

Published Nov 11, 2026

Updated

Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kali Forms: from n/a through 2.4.31.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade wordpress/kali-forms to a version that resolves this vulnerability.
Fixed in 2.4.32

Event History

Nov 11, 2026

CVE Published

via MITRE·12:41 PM

Data Sourced

via MITRE·12:41 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·01:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which Kali Forms versions are affected?

The issue affects Kali Forms through version 2.4.31. The available data does not identify the first affected version.

Does exploitation require authentication or user interaction?

No. The CVSS vector indicates that exploitation can be performed remotely without privileges or user interaction, and has low attack complexity.

What is the expected security impact?

The reported impact is limited to integrity, with no stated confidentiality or availability impact. The CVSS base score is 5.3, rated medium.

CVE-2026-125448: WordPress Kali Forms plugin <= 2.4.31 - Broken Access Control vulnerability

Remediation

Event History

Frequently Asked Questions

Which Kali Forms versions are affected?

Does exploitation require authentication or user interaction?

What is the expected security impact?

Company

Resources

Contact

Frequently Asked Questions

Which Kali Forms versions are affected?

Does exploitation require authentication or user interaction?

What is the expected security impact?