CVE-2026-42703: WordPress Kali Forms plugin <= 2.4.27 - Broken Access Control vulnerability

Q: What level of access does an attacker need to exploit this issue?

The attacker needs network access and an existing low-privileged account or equivalent low-level privileges. No user interaction is required.

Q: What is the expected security impact of successful exploitation?

Successful exploitation may expose confidential information. The available scoring data does not indicate an impact on data integrity or service availability.

Published Oct 29, 2026

Updated

Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kali Forms: from n/a through 2.4.27.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Kali Forms plugin to a version that resolves this vulnerability.
Fixed in 2.4.28

Event History

Oct 29, 2026

CVE Published

via MITRE·01:01 PM

Data Sourced

via MITRE·01:01 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·01:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The attacker needs network access and an existing low-privileged account or equivalent low-level privileges. No user interaction is required.

What is the expected security impact of successful exploitation?