Stored Cross-Site Scripting in BetterDocs Plugin for WordPress
CVE-2026-12157

6.4MEDIUM

Key Information:

Vendor

WordPress
Status
Betterdocs – Ai Documentation, Knowledge Base, Docs, Wikis, Faq With Chatbot
Vendor
CVE Published:
19 June 2026

What is CVE-2026-12157?

The BetterDocs plugin for WordPress presents a vulnerability allowing stored cross-site scripting (XSS) exploitation. This flaw arises from inadequate input sanitization and output escaping in the CategorySlateLayout::render() method, where the blockId attribute is directly included in the HTML class attribute without proper use of esc_attr(). Such a vulnerability permits authenticated attackers with contributor-level access or higher to inject arbitrary web scripts into pages. These scripts execute when a user visits the compromised page, potentially leading to session hijacking, data leakage, or redirecting users to malicious sites.

Affected Version(s)

BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot 0 <= 4.5.3

References

https://www.wordfence.com/threat-intel/vulnerabilities/id...
https://plugins.trac.wordpress.org/browser/betterdocs/tag...
https://plugins.trac.wordpress.org/browser/betterdocs/tag...

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Smidi
.