doctorwp CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH doctorwp CVE published 2026-10-14

CVE-2026-83592

CVE-2026-83592 is a Stored Cross-Site Scripting vulnerability in Contact Form DB for Enfold plugin for WordPress, affecting versions up to 2.0.2. The vulnerability allows unauthenticated attackers to inject web scripts via contact form field values, which are echoed unescaped in admin pages. This vulnerability has a CVSS score of 7.2 and is considered HIGH severity. Defenders should assess exposure and pr [truncated]