Radar sectionsPlugins & themes
Check my site

WordPress plugin

weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot security & vulnerabilities

wedocs— active installsLast vulnerability Nov 7, 2026

Unpatched vulnerability in the latest version

At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.

13Known vulnerabilities
  • Critical0
  • High0
  • Medium13
  • Low0
Vulnerabilities per year
2022: 2 vulnerabilities2222024: 1 vulnerability1242025: 1 vulnerability1252026: 9 vulnerabilities926

All weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot vulnerabilities

weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot vulnerabilities
SeverityVulnerabilityCVEPublished
Medium5.3Missing Authorization
≤2.6.1Update to 2.6.2
CVE-2026-121760
Medium5.3Missing Authorization
≤2.6.1Update to 2.6.2
CVE-2026-121767
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'modalPlaceholder' Block Attribute
≤2.6.1Update to 2.6.2
CVE-2026-104760
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'connectorWidth' Block Attribute
≤2.3.0Update to 2.3.1
CVE-2026-12734
Medium4.3Missing Authorization to Authenticated (Subscriber+) Data Migration via wedocs_migrate_betterdocs_to_wedocs AJAX Action
≤2.3.0Update to 2.3.1
CVE-2026-12729
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'sectionTitleTag' and 'articleTitleTag' Block Attributes
≤2.3.0Update to 2.3.1
CVE-2026-12731
Medium5.3Missing Authorization
≤2.1.18Update to 2.2.1
CVE-2026-39520
Medium4.3Missing Authorization to Authenticated (Subscriber+) Documentation Post Update
≤2.1.16Update to 2.1.17
CVE-2025-13921
Medium5.3Unauthenticated Sensitive Information Exposure
≤2.1.15Update to 2.1.16
CVE-2025-14574
Medium5.4Missing Authorization to Settings Update
≤2.1.14Update to 2.1.15
CVE-2025-12505
Medium5.3Missing Authorization
≤2.1.4Update to 2.1.5
CVE-2024-34442
Medium4.3Missing Authorization
≤3.6.0Update to 3.6.1
—
Medium4.3Cross-Site Request Forgery
≤3.6.0Update to 3.6.1
CVE-2022-47150

weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot: common questions

Does weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot have known vulnerabilities?

Yes. VulnCrest Radar lists 13 known vulnerabilities in weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot: 13 medium. At least one is not fixed in the latest version.

How do I check which version of weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot vulnerability?

CVE-2026-121760, published Nov 7, 2026: weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.6.1 - Missing Authorization. Severity: Medium (CVSS 5.3).

Is any weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot vulnerability listed in CISA KEV?

No. None of the known weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Are you sure?