Skip to content
OpenAdvisories

Vendor

doctorwp

2 known vulnerabilities.

Products

Breaking News WP 1 Contact Form DB for Enfold 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2026-83592

    Contact Form DB for Enfold <= 2.0.2 - Unauthenticated Stored Cross-Site Scripting via Contact Form Field Values

    The Contact Form DB for Enfold plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Contact Form Field Values in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping. This makes it possible for u…

    doctorwp Contact Form DB for Enfold Web / CMS