CVE-2020-36717
The Kali Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1.1. This is due to incorrect nonce handling throughout the plugin's function. This makes it possible for unauthenticated attackers to access the plugin's administrative functions via forged request granted they can trick a site administrator into performing an action such as clicking on a link.
We have discovered 191 live websites that are affected by CVE-2020-36717.
Affected Software
| Product |  Kali Forms |
| Category | Wordpress Plugins |
| Vulnerable Domains | 191 live websites (3.04% of Kali Forms install base) |
| Vulnerable Versions |
|
| Vulnerable Versions Count | 12 versions ( 13.79% of all versions) |
Details
- Published - Jun 7, 2023
- Updated - Dec 23, 2024
Credits
- Jerome Bruandet (finder)
CVE References
CVE-2020-36717 usage by Country
 United States | 49 websites |
 France | 24 websites |
 Germany | 22 websites |
 Spain | 7 websites |
 Russia | 7 websites |
 Poland | 6 websites |
 Japan | 5 websites |
 Canada | 4 websites |
 Australia | 4 websites |
 GB | 4 websites |
CVE-2020-36717 usage by TLD
| .com | 77 websites |
| .fr | 14 websites |
| .org | 8 websites |
| .de | 7 websites |
| .ru | 7 websites |
| .com.au | 6 websites |
| .net | 5 websites |
| .nl | 4 websites |
| .com.br | 4 websites |
| .cz | 4 websites |
Vulnerable Versions
Vulnerable versions are highlighted in redWebsites affected by CVE-2020-36717
Top websites that are affected by CVE-2020-36717. Please click on the "Contact us" link to get more information.| Domain | Country | Rank | Contacts |
|---|---|---|---|
| ***.mu | France | **,*** | |
| ******************.com | United States | ***,*** | |
| ****************.com | United States | *,***,*** | |
| *****.net | United States | *,***,*** | |
| ***********.com | United States | *,***,*** | |
| ********.ru | Russia | *,***,*** | |
| ***********.fr | France | *,***,*** | |
| *****.************.eu | Spain | *,***,*** | |
| ********************.fr | France | *,***,*** | |
| ***.**************.org | United States | *,***,*** |
FAQ
A total of 191 websites have been identified as vulnerable to CVE-2020-36717, discovered through global website indexing conducted by WebTechSurvey.
Kali Forms is susceptible to CVE-2020-36717 vulnerability.
Kali Forms versions before 2.1.2 are vulnerable to CVE-2020-36717.
Version 2.1.2 of Kali Forms addresses the CVE-2020-36717 security vulnerability.