BetterDocs – AI Documentation, Knowledge Base, MCP Server, Docs, Wikis, FAQ & Chatbot vulnerabilities

Plugin slug betterdocs · 15 known vulnerabilities · latest disclosed 2026-08-31 · WordPress.org page

Every listed vulnerability has a fix. Version 4.8.2 or later is not affected by any of them. If your site runs an older version, update it.

3 of 15 rated high or critical (CVSS 7 or more).

Known vulnerabilities in BetterDocs – AI Documentation, Knowledge Base, MCP Server, Docs, Wikis, FAQ & Chatbot

SeverityAffected versionsFixed inCVEPublishedDetails
Medium 6.4<= 4.8.14.8.2CVE-2026-759802026-08-31Advisory
Medium 6.4<= 4.6.24.7.0CVE-2026-655622026-07-24Advisory
Medium 6.5<= 4.6.04.6.1CVE-2026-151042026-07-09Advisory
High 7.2<= 4.5.44.5.5CVE-2026-113712026-06-25Advisory
Medium 6.4<= 4.5.34.5.4CVE-2026-121572026-06-18Advisory
Medium 4.3<= 4.3.114.3.12CVE-2026-63932026-04-23Advisory
Medium 6.4<= 4.3.84.3.9CVE-2026-38752026-04-15Advisory
Medium 5.3<= 4.3.104.3.11CVE-2026-426442026-03-18Advisory
Medium 6.5<= 4.3.34.3.4CVE-2025-149802026-01-08Advisory
Medium 5.3<= 4.1.14.1.2CVE-2025-74992025-08-15Advisory
Medium 6.4<= 3.5.83.5.9CVE-2024-432272024-08-09Advisory
High 8.8<= 3.5.83.5.9CVE-2024-431292024-08-07Advisory
Critical 9.8<= 3.3.33.3.4CVE-2024-302262024-03-26Advisory
Medium 6.4<= 3.4.23.5.0CVE-2024-28452024-03-25Advisory
Medium 4.3<= 2.5.22.5.3CVE-2023-477622023-11-13Advisory

Check if a site is affected

Enter a site address to see which version of BetterDocs – AI Documentation, Knowledge Base, MCP Server, Docs, Wikis, FAQ & Chatbot and other plugins it runs, and whether they match a known vulnerability.

Questions

Is the BetterDocs – AI Documentation, Knowledge Base, MCP Server, Docs, Wikis, FAQ & Chatbot plugin safe to use?

All 15 known issues are fixed in current versions (4.8.2 or later). Keeping it updated is what matters.

How do I check which version of BetterDocs – AI Documentation, Knowledge Base, MCP Server, Docs, Wikis, FAQ & Chatbot my site runs?

In WordPress go to Plugins > Installed Plugins. From the outside, the free PluginPeek scan below reads the version from the site's public files.

How do I fix a vulnerable plugin?

Make a full backup, then update it from Dashboard > Updates and check the site afterwards. If you would rather not, we can do it for a fixed $99, paid after you have checked the site.

Check any WordPress site in one click while you browse: Add PluginPeek to Chrome