Vendors / betterdocs Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now betterdocs records in CISA KEV No betterdocs vulnerabilities are listed in CISA KEV.
Priority MEDIUM 51
The BetterDocs Pro plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 3.8.0 via the `doc_style` parameter.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00942 · Published 2026-06-19 · No fix listed CWE-98
Priority LOW 39
The BetterDocs Pro plugin for WordPress is vulnerable to SQL Injection via the `get_current_letter_docs` and `docs_sort_by_letter` AJAX actions in all versions up to, and including, 3.7.0.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00395 · Published 2026-05-07 · No fix listed CWE-89
Open these records in search → All records by CVSS severity
Critical1 High1 Medium0 Low0 No CVSS0