Subscriber Arbitrary File Deletion in Kali Forms

Executive Summary

This vulnerability is an Arbitrary File Deletion issue in the WordPress Kali Forms Plugin versions 2.4.18 and below. It allows attackers with Subscriber-level access to delete files from a website, potentially causing it to break or stop functioning.

Useful 0 Not Useful 0

Detection Guidance

Check if Kali Forms plugin version 2.4.18 or below is installed on your WordPress site. Look for unauthorized file deletions or suspicious activity in server logs. Use commands like 'grep -r "kali-forms" /var/www/' to locate the plugin and 'ls -la /path/to/wordpress/wp-content/uploads/' to check for missing files.

Useful 0 Not Useful 0

Impact Analysis

It can lead to website downtime, data loss, or complete site failure. Attackers may exploit it in mass campaigns, affecting websites of any size. The flaw requires minimal privileges to trigger, making it accessible to many potential attackers.

Useful 0 Not Useful 0

Mitigation Strategies

Update Kali Forms plugin to version 2.4.19 or later immediately. If updating is not possible, apply Patchstack's mitigation rule to block attacks until the update is applied. Remove unnecessary user accounts with Subscriber-level privileges to reduce attack surface.

Useful 0 Not Useful 0