doctorwp
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Breaking News WP | 1 | – | Apr 22, 2026 |
| Contact Form DB for Enfold | 1 | – | Oct 14, 2026 |
Exploited and recent CVEs
- CVE-2026-83592 Contact Form DB for Enfold <= 2.0.2 - Unauthenticated Stored Cross-Site Scripting via Contact Form Field Values 0.3%
- CVE-2026-4280 Breaking News WP <= 1.3 - Missing Authorization to Authenticated (Subscriber+) Local File Inclusion/Read 0.8%