Philipp Doblhofer

Philipp Doblhofer is a security researcher credited with 16 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #330 of 3,823 contributors. The disclosure was published in 2026.

Their research concentrates on Cross-Site Scripting, which accounts for 11 of their findings (69%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, Improper Privilege Management. The average CVSS score across these disclosures is 6.5, peaking at 9.1. Severity breakdown: 1 critical and 2 high.

The most affected software includes CoolClock (2), Audio Player Block (1), BackWPup (1), across 15 distinct plugins, themes and core versions in total.

14 of the 16 disclosed issues have a vendor fix, while 2 remain unpatched. The most severe finding, "Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Deletion", scores 9.1 out of 10.

2026
Critical
High
Medium
Low
Global Rank

#330

of 3,823 researchers

Vulns

16

Critical1
High2
Medium13
Low0
Affected Assets

15

15plugins
Avg CVSS

6.5

Average score of vulnerabilities

Researcher Submissions

16 records
2026-10-14 00:00CVE-2026-86797
6.4
Medium
Philipp DoblhoferYes
2026-10-14 00:00CVE-2026-92409
6.4
Medium
Philipp DoblhoferYes
2026-10-08 00:00CVE-2026-86826
5.3
Medium
Philipp DoblhoferYes
2026-10-08 00:00CVE-2026-12980
6.4
Medium
Philipp DoblhoferNo
2026-10-05 00:00CVE-2026-39792
9.1
Critical
Philipp DoblhoferNo
2026-10-01 19:23CVE-2026-103426
7.2
High
Philipp DoblhoferYes
2026-09-28 00:00CVE-2026-85415
6.4
Medium
Philipp DoblhoferYes
2026-09-25 00:00CVE-2026-89006
6.4
Medium
Philipp DoblhoferYes
2026-09-24 00:00CVE-2026-92411
6.4
Medium
Philipp DoblhoferYes
2026-09-13 00:00CVE-2026-88995
5.3
Medium
Philipp DoblhoferYes
Showing 1–10 of 16 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C