CVE-2026-42644: medium-severity vulnerability in WPDeveloper BetterDocs
WordPress BetterDocs plugin <= 4.3.10 - Sensitive Data Exposure vulnerability
Published · Updated
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 0.3%
exploitation probability
0.3%top 78% of all CVEs
observed exploitation
nono source reports it
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper BetterDocs betterdocs allows Retrieve Embedded Sensitive Data.This issue affects BetterDocs: from n/a through <= 4.3.10.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected products
WPDeveloper · BetterDocsRelated CVEs — WPDeveloper BetterDocs
In the same product, most dangerous first.
CVE-2024-30226CRITICALWordPress BetterDocs plugin <= 3.3.3 - Unauthenticated PHP Object Injection vulnerabilityEPSS 0.9%CVE-2024-43129MEDIUMWordPress BetterDocs plugin <= 3.5.8 - Local File Inclusion vulnerabilityEPSS 0.6%CVE-2023-47762MEDIUMWordPress BetterDocs plugin <= 2.5.2 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-43227MEDIUMWordPress BetterDocs – Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer for Elementor & Gutenberg plugin <= 3.5.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-65562MEDIUMWordPress BetterDocs plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%