PT-2026-1762 · WordPress · Betterdocs

Dmitry Ignatyev · Publicado 2026-01-09 · Atualizado 2026-01-09 · CVE-2025-14980

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions BetterDocs versions prior to 4.3.4

Description The BetterDocs plugin for WordPress is susceptible to sensitive information exposure through the scripts() function. Authenticated attackers with contributor-level access or higher can potentially extract sensitive data, including the OpenAI API key stored in the plugin settings.

Recommendations Update BetterDocs to version 4.3.4 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2025-14980

Produtos afetados

Betterdocs

Referências · 5

• https://research.cleantalk.org/cve-2025-14980 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-14980 · Nota de Segurança
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3430424%40betterdocs%2Ftags%2F4.3.4&old=3422660%40betterdocs%2Ftrunk · Nota
• https://twitter.com/CVEnew/status/2009526575704768976 · Publicação no Twitter
• https://wordfence.com/threat-intel/vulnerabilities/id/1595f231-d300-484a-a0e1-1e2bc7b82ed3?source=cve · Nota