PT-2026-38341 · Betterdocs · Betterdocs Pro

Published 2026-05-07 · Updated 2026-05-07 · CVE-2026-4348

NVD

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

The BetterDocs Pro plugin for WordPress is vulnerable to SQL Injection via the get current letter docs and docs sort by letter AJAX actions in all versions up to, and including, 3.7.0. This is due to the limit POST parameter being interpolated directly into a SQL query string before being passed to $wpdb->prepare(), which only parameterizes other variables. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The Encyclopedia feature must be enabled in BetterDocs Pro settings for the vulnerability to be exploitable.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-4348

Affected Products

Betterdocs Pro

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-4348 · Security Note
• https://betterdocs.co/changelog · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/5c0f02ad-f5f1-42b1-8116-e391aaa85430?source=cve · Note