https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:10:13.259053+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-285043 EUVD-2026-285043 2026-10-02T12:10:13.302090+00:00 EUVD-2026-285043 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3584 fkie_cve-2026-3584 2026-10-02T12:10:13.302125+00:00

The Kali Forms plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.4.9 via the 'form_process' function. This is due to the 'prepare_post_data' function mapping user-supplied keys directly into internal placeholder storage, combined with the use of 'call_user_func' on these placeholder values. This makes it possible for unauthenticated attackers to execute code on the server.

 https://cve.radiocsirt.org/vuln/ghsa-r9mm-2qxw-xjgc GHSA-r9mm-2qxw-xjgc 2026-10-02T12:10:13.302161+00:00

The Kali Forms plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.4.9 via the 'form_process' function. This is due to the 'prepare_post_data' function mapping user-supplied keys directly into internal placeholder storage, combined with the use of 'call_user_func' on these placeholder values. This makes it possible for unauthenticated attackers to execute code on the server.