Critical Vulnerability Discovered in Kali Forms Plugin for WordPress
On March 2, 2026, a severe security flaw was identified in the Kali Forms plugin for WordPress, affecting over 10,000 active installations. This vulnerability allows unauthenticated attackers to execute malicious code on the server, posing an immediate risk to website owners.
The affected version of the plugin is 2.4.9 and earlier, with the patched version being 2.4.10. Attackers began exploiting this vulnerability the day it was disclosed, leading to over 312,200 blocked exploit attempts by the Wordfence Firewall.
To safeguard against potential attacks, users are strongly urged to update to the latest version immediately. Given the critical nature of this vulnerability, it has been assigned a risk level of 9.8 out of 10, indicating a high immediate threat. For those impacted, Wordfence offers incident response services to assist with compromised sites.
Source: View Original Report
