{"cvss":7.1,"datePublished":"2020-08-21T00:00:00Z","dateUpdated":"2020-08-21T00:00:00Z","description":"The Kali Forms plugin for WordPress is vulnerable to Authenticated Options Change in versions up to, and including, 2.1.1. This is due to the update_option lacking proper authentication checks. This makes it possible for any authenticated attacker to change (or delete) the plugin's settings.","dueDate":"","id":"CVE-2020-36720","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"kali_forms","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"kaliforms kali_forms Missing Authorization","vendor":"kaliforms"}