BetterDocs Pro vulnerabilities

2 known vulnerabilities in BetterDocs Pro from BetterDocs. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  BetterDocs Pro: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2026-7515Jun 19, 2026BetterDocs

  The BetterDocs Pro plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 3.8.0 via the `doc_style` parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server,

• 7.5 High severity

  BetterDocs Pro: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-4348May 7, 2026BetterDocs

  The BetterDocs Pro plugin for WordPress is vulnerable to SQL Injection via the `get_current_letter_docs` and `docs_sort_by_letter` AJAX actions in all versions up to, and including, 3.7.0. This is due to the `limit` POST parameter being interpolated directly i