CVE-2026-81276

WordPress Kali Forms plugin <= 2.4.23 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Kali Forms <= 2.4.23 versions.

We have discovered 1,857 live websites that are affected by CVE-2026-81276.

Run a Free Instant Scan



Affected Software

Product  Kali Forms
Category Wordpress Plugins
Vulnerable Domains1,857 live websites (100% of Kali Forms install base)
Vulnerable Versions
  • from 0 through 2.4.23
Vulnerable Versions Count74 versions ( 100% of all versions)


Common Weakness Enumeration

CWE-862 Missing Authorization



Details

  • Published - Aug 27, 2026
  • Updated - Aug 27, 2026

Credits

  • sungbyeongchan | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2026-81276
United States521 websites


Germany265 websites
Netherlands140 websites
GB128 websites
France122 websites
Italy62 websites
Poland49 websites
Czech Republic43 websites
Canada34 websites
Australia33 websites

Website Distribution by TLD

Number of websites using CVE-2026-81276
.com703 websites
.de170 websites
.nl123 websites
.org93 websites
.co.uk82 websites
.fr65 websites
.net39 websites
.cz39 websites
.pl33 websites
.it31 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-81276

Top websites that are affected by CVE-2026-81276. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*********.com United States**,***
*********.com United States**,***
******************.com United States**,***
*********.com United States**,***
****************.com United States**,***
*************.com United States***,***
***************.com Italy***,***
**********.com United States***,***
***********.me Bulgaria***,***
***************.cz Czech Republic***,***
See full domain list

FAQ

CVE-2026-81276 is Missing Authorization in Kali Forms
A total of 1,857 websites have been identified as vulnerable to CVE-2026-81276, based on global website indexing conducted by WebTechSurvey.
The Kali Forms is affected by the CVE-2026-81276 vulnerability.
Kali Forms versions up to and including 2.4.23 are vulnerable to CVE-2026-81276.