Wpdeveloper
Wpdeveloper Betterdocs: vulnerabilidades y CVE
Wpdeveloper Betterdocs tiene 14 vulnerabilidades publicadas, 8 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE14
Últimos 12 meses8
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-75980 | Media (6.4) | 0.35% | — | 1 sept 2026 | The BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Heading 'id' Attribute in Post Content in all versions up to, and… |
| CVE-2026-65562 | Media (6.5) | 0.22% | — | 27 jul 2026 | Contributor Cross Site Scripting (XSS) in BetterDocs <= 4.6.2 versions. |
| CVE-2026-11371 | Media (6.1) | 0.27% | — | 16 jul 2026 | The BetterDocs WordPress plugin before 4.5.5 does not sanitise an AI-generated documentation summary before storing and outputting it, and the feature that generates it is exposed to unauthenticated users, allowing them… |
| CVE-2026-15104 | Media (6.5) | 0.41% | — | 10 jul 2026 | The BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot plugin for WordPress is vulnerable to generic SQL Injection via the 'lang' parameter in all versions up to, and including, 4.6.0 due to… |
| CVE-2026-12157 | Media (6.4) | 0.35% | — | 19 jun 2026 | The BetterDocs - Knowledge Base Docs & FAQ Solution for Elementor & Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the blockId attribute of the betterdocs/category-slate-layout… |
| CVE-2026-42644 | Media (5.3) | 0.31% | — | 29 abr 2026 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper BetterDocs betterdocs allows Retrieve Embedded Sensitive Data.This issue affects BetterDocs: from n/a through <=… |
| CVE-2026-6393 | Media (4.3) | 0.35% | — | 24 abr 2026 | The BetterDocs plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 4.3.11. This is due to a missing capability check in the generate_openai_content_callback() function, which… |
| CVE-2025-14980 | Media (6.5) | 0.36% | — | 9 ene 2026 | The BetterDocs plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3.3 via the scripts() function. This makes it possible for authenticated attackers, with… |
| CVE-2025-7499 | Media (5.3) | 0.29% | — | 16 ago 2025 | The BetterDocs – Advanced AI-Driven Documentation, FAQ & Knowledge Base Tool for Elementor & Gutenberg with Encyclopedia, AI Support, Instant Answers plugin for WordPress is vulnerable to unauthorized access of data due… |
| CVE-2023-47762 | Media (4.3) | 0.34% | — | 9 dic 2024 | Missing Authorization vulnerability in WPDeveloper BetterDocs betterdocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BetterDocs: from n/a through <= 2.5.2. |
| CVE-2024-43129 | Alta (8.8) | 0.57% | — | 13 ago 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPDeveloper BetterDocs allows PHP Local File Inclusion.This issue affects BetterDocs: from n/a through 3.5.8. |
| CVE-2024-43227 | Media (5.4) | 0.26% | — | 12 ago 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper BetterDocs allows Stored XSS.This issue affects BetterDocs: from n/a through 3.5.8. |
| CVE-2024-2845 | Media (6.4) | 0.35% | — | 9 abr 2024 | The BetterDocs – Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer For Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s)… |
| CVE-2024-30226 | Crítica (9) | 0.86% | — | 28 mar 2024 | Deserialization of Untrusted Data vulnerability in WPDeveloper BetterDocs.This issue affects BetterDocs: from n/a through 3.3.3. |