Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: wpdevteam Component: Betterdocs Clear all filters
TI-2023-25872 CVE-2023-47762 · GHSA-xhpp-qjw5-78w2

WordPress BetterDocs plugin <= 2.5.2 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in WPDeveloper BetterDocs betterdocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BetterDocs: from n/a through <= 2.5.2.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00337 Published 2024-12-09 No fix listed CWE-862
TI-2024-28800 CVE-2024-43129 · GHSA-4x6g-78gw-mgr8

WordPress BetterDocs plugin <= 3.5.8 - Local File Inclusion vulnerability

Priority LOW 39

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPDeveloper BetterDocs allows PHP Local File Inclusion.This issue affects BetterDocs: from n/a through 3.5.8.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00567 Published 2024-08-13 No fix listed CWE-22
TI-2024-28880 CVE-2024-43227 · GHSA-cc5p-rg2f-vwq2

Cross-site scripting in wpdevteam BetterDocs

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper BetterDocs allows Stored XSS.This issue affects BetterDocs: from n/a through 3.5.8.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0026 Published 2024-08-12 No fix listed CWE-79