doctorwp

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

doctorwp records in CISA KEV

No doctorwp vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-73759 CVE-2026-83592 · GHSA-32g6-jxx8-8m9g

Stored cross-site scripting in Contact Form DB for Enfold

LOW 37

The Contact Form DB for Enfold plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Contact Form Field Values in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00309 Published 2026-10-14 No fix listed CWE-79

TI-2026-03725 CVE-2026-4280 · GHSA-mh5c-2v7r-xcxg

Breaking News WP <= 1.3 - Missing Authorization to Authenticated (Subscriber+) Local File Inclusion/Read

LOW 30

The Breaking News WP plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00814 Published 2026-04-22 No fix listed CWE-22

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0