cleantalk
Vulnerabilities and Security Researches

Contact Form builder with drag & drop for WordPress – Kali Forms, 06070ebd-1843-4a01-a668-8123688b7c7b

Published on
-
Research Description
Kali Forms — Contact Form &amp; Drag-and-Drop Builder [kali-forms] < 2.1.2 Contact Form - Form builder by Kali Forms &lt; 2.1.2 - Unauthenticated Arbitrary Post Deletion The plugin registers the kaliforms_form_delete_uploaded_file AJAX action to call the &quot;delete_file&quot; function, and makes it accessible to all users, authenticated or not
Affected versions
max 2.1.2.
Status
vulnerable