https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:41:57 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-285043 EUVD-2026-285043 https://cve.radiocsirt.org/vuln/euvd-2026-285043 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3584 <p>The Kali Forms plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.4.9 via the &#39;form_process&#39; function. This is due to the &#39;prepare_post_data&#39; function mapping user-supplied keys directly into internal placeholder storage, combined with the use of &#39;call_user_func&#39; on these placeholder values. This makes it possible for unauthenticated attackers to execute code on the server.</p> <p>The Kali Forms plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.4.9 via the &#39;form_process&#39; function. This is due to the &#39;prepare_post_data&#39; function mapping user-supplied keys directly into internal placeholder storage, combined with the use of &#39;call_user_func&#39; on these placeholder values. This makes it possible for unauthenticated attackers to execute code on the server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-3584 https://cve.radiocsirt.org/vuln/ghsa-r9mm-2qxw-xjgc <p>The Kali Forms plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.4.9 via the &#39;form_process&#39; function. This is due to the &#39;prepare_post_data&#39; function mapping user-supplied keys directly into internal placeholder storage, combined with the use of &#39;call_user_func&#39; on these placeholder values. This makes it possible for unauthenticated attackers to execute code on the server.</p> <p>The Kali Forms plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.4.9 via the &#39;form_process&#39; function. This is due to the &#39;prepare_post_data&#39; function mapping user-supplied keys directly into internal placeholder storage, combined with the use of &#39;call_user_func&#39; on these placeholder values. This makes it possible for unauthenticated attackers to execute code on the server.</p> https://cve.radiocsirt.org/vuln/ghsa-r9mm-2qxw-xjgc