High severity7.6NVD Advisory· Published Feb 29, 2024· Updated Apr 8, 2026
CVE-2024-1217
CVE-2024-1217
Description
The Contact Form builder with drag & drop for WordPress – Kali Forms plugin for WordPress is vulnerable to unauthorized plugin deactivation due to a missing capability check on the await_plugin_deactivation function in all versions up to, and including, 2.3.41. This makes it possible for authenticated attackers, with subscriber access or higher, to deactivate any active plugins.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:kaliforms:contact_form_builder:*:*:*:*:*:wordpress:*:*Range: <2.3.42
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.