A critical remote code execution vulnerability in the wpchill Kali Forms plugin permits unauthenticated attackers to execute arbitrary code, potentially leading to total system compromise.

This is a code injection vulnerability (CWE-94) that allows remote, unauthenticated attackers to execute arbitrary code on the server. The flaw exists within the form processing functions of the plugin, which fail to properly sanitize user-supplied input.

Remote code execution is the most severe class of vulnerability, as it allows an attacker to gain full control over the underlying web server. This could lead to the installation of backdoors, theft of database credentials, and the potential for lateral movement within the network. With a CVSS score of 8.1, the business impact is severe and requires immediate attention.

Immediate Action: Immediately deactivate or remove the Kali Forms plugin until a secure, patched version is released by wpchill.

Proactive Monitoring: Monitor server logs for unexpected file modifications, unauthorized outbound network connections, or the creation of new files in the WordPress upload directory.

Compensating Controls: Implement a WAF to filter malicious payloads targeting form input fields and ensure that the web server is running with the principle of least privilege.

Public Exploit Available: Unknown.

Given the potential for remote code execution, this vulnerability must be treated as a critical priority. Administrators should remove the plugin immediately to prevent exploitation and monitor the environment for any signs of prior unauthorized access.