WordPress plugin
BetterDocs – AI Documentation, Knowledge Base, MCP Server, Docs, Wikis, FAQ & Chatbot security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 15 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High2
- Medium12
- Low0
All BetterDocs – AI Documentation, Knowledge Base, MCP Server, Docs, Wikis, FAQ & Chatbot vulnerabilities
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Heading 'id' Attribute in Post Content
≤4.8.1Update to 4.8.2
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.6.2Update to 4.7.0
- Medium6.5Authenticated (Custom+) SQL Injection via 'lang' Parameter
≤4.6.0Update to 4.6.1
- High7.2Unauthenticated Stored Cross-Site Scripting
≤4.5.4Update to 4.5.5
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'blockId' Block Attribute
≤4.5.3Update to 4.5.4
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Unauthorized AI API Usage
≤4.3.11Update to 4.3.12
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
≤4.3.8Update to 4.3.9
- Medium5.3Unauthenticated Information Exposure
≤4.3.10Update to 4.3.11
- Medium6.5Authenticated (Contributor+) Sensitive Information Exposure
≤4.3.3Update to 4.3.4
- Medium5.3Missing Authorization to Private And Password-Protected Posts Information Disclosure
≤4.1.1Update to 4.1.2
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤3.5.8Update to 3.5.9
- High8.8Authenticated (Contributor+) Local File Inclusion
≤3.5.8Update to 3.5.9
- Critical9.8Unauthenticated PHP Object Injection
≤3.3.3Update to 3.3.4
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
≤3.4.2Update to 3.5.0
- Medium4.3Missing Authorization via AJAX actions
≤2.5.2Update to 2.5.3
BetterDocs – AI Documentation, Knowledge Base, MCP Server, Docs, Wikis, FAQ & Chatbot: common questions
Does BetterDocs – AI Documentation, Knowledge Base, MCP Server, Docs, Wikis, FAQ & Chatbot have known vulnerabilities?
Yes. VulnCrest Radar lists 15 known vulnerabilities in BetterDocs – AI Documentation, Knowledge Base, MCP Server, Docs, Wikis, FAQ & Chatbot: 1 critical, 2 high, 12 medium. None are known to affect version null.
How do I check which version of BetterDocs – AI Documentation, Knowledge Base, MCP Server, Docs, Wikis, FAQ & Chatbot I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent BetterDocs – AI Documentation, Knowledge Base, MCP Server, Docs, Wikis, FAQ & Chatbot vulnerability?
CVE-2026-75980, published Aug 31, 2026: BetterDocs <= 4.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading 'id' Attribute in Post Content. Severity: Medium (CVSS 6.4).
Is any BetterDocs – AI Documentation, Knowledge Base, MCP Server, Docs, Wikis, FAQ & Chatbot vulnerability listed in CISA KEV?
No. None of the known BetterDocs – AI Documentation, Knowledge Base, MCP Server, Docs, Wikis, FAQ & Chatbot vulnerabilities is currently listed in the CISA KEV catalog.