Threats tagged 'ghsa-89cx-53rv-jcx8'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.5	CVE-2026-4348The BetterDocs Pro plugin for WordPress is vulnerable to SQL Injection via the get_current_letter_docs and High7.52026-05-07GCVE DatabaseCVE-2026-4348 The BetterDocs Pro plugin for WordPress contains a SQL Injection vulnerability in versions up to and including 3.7.0. The flaw exists in the AJAX actions get_current_letter_docs and docs_sort_by_letter, where the limit POST parameter is improperly handled, allowing unauthenticated attackers to inject SQL code. Exploitation requires the Encyclopedia feature to be enabled in the plugin settings. Report on CVE-2026-4348 Vulnerability CWE-89 #ghsa-89cx-53rv-jcx8	GCVE Database	2026-05-07

Page 1 of 1