DOCKER.md

🐳 Docker Lab — CVE-2026-2991

Self-contained Docker Compose environment running WordPress with the vulnerable KiviCare <= 4.1.2 plugin pre-installed. On first boot the lab automatically installs WordPress, activates the plugin, and seeds a clinic with doctors and patients.

Credentials

Role	Username	Email	Password
Admin	admin	admin@example.com	admin
Doctor	dr.harris	dr.harris@greenfield.test	Doctor@123
Doctor	dr.chen	dr.chen@greenfield.test	Doctor@123
Doctor	dr.okonkwo	dr.okonkwo@greenfield.test	Doctor@123
Patient	james.ford	james.ford@patients.test	Patient@123
Patient	sofia.reyes	sofia.reyes@patients.test	Patient@123
Patient	oliver.knight	oliver.knight@patients.test	Patient@123
Patient	amara.diallo	amara.diallo@patients.test	Patient@123
Patient	dan.walsh	dan.walsh@patients.test	Patient@123

• WordPress: http://localhost:8080
• Admin panel: http://localhost:8080/wp-admin

Building & Running

Build and start the lab:

docker compose down -v --remove-orphans
docker compose build --no-cache
docker compose up

To run in the background:

docker compose up -d

To stop and clean up volumes:

docker compose down -v