CVE-2026-106649 | Kali Forms Plugin up to 2.4.28 on WordPress Form Button Configuration cross site scripting

November 4, 2026 Yanac

A vulnerability classified as problematic was found in Kali Forms Plugin up to 2.4.28 on WordPress. This issue affects some unknown processing of the component Form Button Configuration. The manipulation results in cross site scripting.

This vulnerability is reported as CVE-2026-106649. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More