This vulnerability in WPDeveloper BetterDocs (<= 4.3.10) permits an unauthorized control sphere to retrieve embedded sensitive system information. The CVSS 3.1 score is 5.3 (medium), reflecting network attack vector, low complexity, no privileges required, no user interaction, and impact limited to integrity loss without confidentiality or availability impact. The vulnerability is publicly disclosed but lacks an official remediation or patch as of the publication date.

An attacker can access sensitive system information embedded within the BetterDocs plugin without authentication or user interaction. This may lead to information disclosure that could aid further attacks or reconnaissance. There is no direct impact on confidentiality or availability, and no known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor WPDeveloper communications for updates. No specific temporary mitigations are provided in the available data.