PT-2026-34851 · WordPress · Betterdocs

Published 2026-04-24 · Updated 2026-04-25 · CVE-2026-6393

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions BetterDocs versions prior to 4.3.12

Description The plugin contains a missing authorization flaw caused by a lack of capability checks in the generate openai content callback() function. The function relies exclusively on a nonce without verifying user permissions. This allows authenticated attackers with subscriber-level access or higher to trigger OpenAI API calls using the site's configured API key and arbitrary prompts, resulting in the unauthorized consumption of the site owner's paid AI API quota.

Recommendations Update to a version later than 4.3.11. As a temporary workaround, restrict access to the generate openai content callback() function to minimize the risk of exploitation.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-6393

Affected Products

Betterdocs

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-6393 · Security Note
• https://plugins.trac.wordpress.org/browser/betterdocs/trunk/includes/Core/WriteWithAI.php#L31 · Note
• https://plugins.trac.wordpress.org/browser/betterdocs/tags/4.3.6/includes/Core/WriteWithAI.php#L138 · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/432b11be-174d-45d6-aa3b-2fbfa85ec17a?source=cve · Note
• https://twitter.com/CVEnew/status/2048099321459900799 · Twitter Post
• https://plugins.trac.wordpress.org/browser/betterdocs/trunk/includes/Core/WriteWithAI.php#L138 · Note
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3512640%40betterdocs&new=3512640%40betterdocs&sfp_email=&sfph_mail= · Note
• https://plugins.trac.wordpress.org/browser/betterdocs/tags/4.3.6/includes/Core/WriteWithAI.php#L31 · Note