CVSS 3.1 Score 4.3 of 10 (medium)


Published Feb 29, 2024


CVE-2024-1218 is a vulnerability found in the Contact Form builder with drag & drop for WordPress – Kali Forms plugin for WordPress. The vulnerability exists in all versions up to and including 2.3.41 of the plugin, allowing authenticated attackers with contributor access or higher to gain unauthorized access or modify forms and entries via API due to an inconsistent capability check on several REST endpoints. The risk score for this vulnerability is 5 out of 10, indicating a medium severity level. It has a base score of 4.3 and an exploitability score of 2.8, with low privileges required and no user interaction needed. The potential danger it poses to an organization includes unauthorized access to sensitive data and the ability to manipulate forms or entries.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-1218 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options