PT-2026-1746 · WordPress · Wedocs

German · Publicado 2026-01-09 · Atualizado 2026-01-09 · CVE-2025-14574

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions weDocs plugin for WordPress versions prior to 2.1.16

Description The weDocs plugin for WordPress is susceptible to sensitive information disclosure. Unauthenticated attackers can extract sensitive data, including API keys for third-party services, through the /wp-json/wp/v2/docs/settings API endpoint. The vulnerable parameter is not specified.

Recommendations Update the weDocs plugin to version 2.1.16 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2025-14574

Produtos afetados

Wedocs

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-14574 · Nota de Segurança
• https://wordfence.com/threat-intel/vulnerabilities/id/cbca3d1e-0985-43d3-855e-eee07715f670?source=cve · Nota
• https://twitter.com/CVEnew/status/2009526567894917561 · Publicação no Twitter
• https://plugins.trac.wordpress.org/changeset?old_path=/wedocs/tags/2.1.15&new_path=/wedocs/tags/2.1.16#file12 · Nota
• https://t.me/cveNotify/148182 · Publicação no Telegram