WordPress · Betterdocs · CVE-2025-7499
Name of the Vulnerable Software and Affected Versions:
BetterDocs – Advanced AI-Driven Documentation, FAQ & Knowledge Base Tool for Elementor & Gutenberg with Encyclopedia, AI Support, Instant Answers plugin for WordPress versions up to and including 4.1.1
Description:
The BetterDocs plugin for WordPress is susceptible to unauthorized data access due to a missing capability check on the `get response` function. This allows unauthenticated attackers to retrieve passwords for password-protected documents and metadata of private and draft documents.
Recommendations:
Update to a version beyond 4.1.1.