CVE-2024-22305

HIGH 8.1CVE-2024-22305 · Published 31/01/2024 · updated 17/06/2026

In short

CVE-2024-22305 is a HIGH (CVSS 8.1) vulnerability affecting kali forms (kaliforms).
Chance of exploitation in the next 30 days (EPSS): 0.45%, higher than 39.5% of all vulnerabilities.
Fix: update to 2.3.37 or later.

Package	Affected versions	Patched versions
kali forms kaliforms	`< 2.3.37`	`2.3.37`

Description

Authorization Bypass Through User-Controlled Key vulnerability in ali Forms Contact Form builder with drag & drop for WordPress – Kali Forms.This issue affects Contact Form builder with drag & drop for WordPress – Kali Forms: from n/a through 2.3.36.

References

patchstack.com/database/vulnerability/kali-forms/wordpress-kali-forms-plugin-2-3-38-insecure-direct-object-references-idor-vulnerability · Third Party Advisory

More vulnerabilities in kali forms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

kali forms

kaliforms

< 2.3.37

2.3.37

More vulnerabilities in kali forms

See all →