WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Kali Forms — Contact Form & Drag-and-Drop Builder

Build contact forms for your WordPress website in minutes through the Drag & Drop builder and Guided Emails for entries notifications.

19Reported vulnerabilities
9.8Highest CVSS score
2.4.23Latest version
10,000+Active installs

What to do now

Update Kali Forms — Contact Form & Drag-and-Drop Builder to 2.4.24 or later. 19 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 7, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2020-36717 High 8.8 0.5% 2.1.1 and earlier 2.1.2 June 7, 2023
CVE-2026-3584 Critical 9.8 7.2% 0 to 2.4.9 (inclusive) 2.4.10 March 20, 2026
CVE-2020-36720 High 7.1 0.8% 2.1.1 and earlier 2.1.2 June 7, 2023
CVE-2025-3201 Medium 5.9 0.3% Before 2.4.3 2.4.3 May 16, 2025
CVE-2020-36712 Medium 5.3 0.7% 2.1.1 and earlier 2.1.2 June 7, 2023
CVE-2026-16144 High 8.1 0.7% 0 to 2.4.20 (inclusive) 2.4.21 August 1, 2026
CVE-2026-59542 High 8.1 0.5% 2.4.18 and earlier 2.4.19 July 22, 2026
CVE-2024-22305 High 8.1 0.5% Before 2.3.37 2.3.37 January 31, 2024
CVE-2026-15395 High 7.2 0.4% 0 to 2.4.18 (inclusive) 2.4.19 July 17, 2026
CVE-2026-65446 High 7.2 0.1% 2.4.18 and earlier 2.4.19 July 27, 2026
CVE-2026-9107 Medium 6.4 0.4% 0 to 2.4.13 (inclusive) 2.4.14 July 1, 2026
CVE-2023-45275 Medium 6.5 0.5% 2.3.28 and earlier 2.3.29 October 6, 2023
CVE-2024-1218 Medium 5.4 0.3% Before 2.3.41 2.3.41 February 29, 2024
CVE-2026-81276 Medium 5.3 0.3% 2.4.23 and earlier 2.4.24 August 26, 2026
CVE-2026-11579 Medium 5.3 0.4% 2.4.16 and earlier 2.4.17 June 24, 2026
CVE-2023-46083 Medium 5.3 0.4% 2.3.27 and earlier 2.3.28 October 16, 2023
CVE-2026-11580 Medium 4.3 0.3% 2.4.16 and earlier 2.4.17 June 24, 2026
CVE-2026-1860 Medium 4.3 0.3% 0 to 2.4.8 (inclusive) 2.4.9 February 18, 2026
CVE-2024-1217 Medium 4.3 0.3% Before 2.3.42 2.3.42 February 29, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.