← WordPress Vulnerabilities
WordPress security by component

weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot

weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot is a WordPress component with 8 published CVE records in this archive. The latest tracked vulnerability was published Jul 03, 2026; the highest CVE/CNA score is 6.4.

Plugin slug: wedocs

CVE-2026-12734: weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot: Cross-site scripting

weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 2.3.0.

PublishedJul 03, 2026
Known safe version> 2.3.0
Safe version
Jul 03, 2026 CVE-2026-12734
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot: Cross-site scripting
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 2.3.0.
> 2.3.0
CVE6.4
NVDPending
Jul 03, 2026 CVE-2026-12731
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot: Cross-site scripting
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 2.3.0.
> 2.3.0
CVE6.4
NVDPending
Jul 03, 2026 CVE-2026-12729
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot: A security weakness
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 2.3.0.
> 2.3.0
CVE4.3
NVDPending
Apr 08, 2026 CVE-2026-39520
weDocs: A security weakness
weDocs is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 2.1.18.
2.2.1
CVE5.3
NVDPending
Jan 23, 2026 CVE-2025-13921
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot: A security weakness
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.3
NVDPending
Jan 09, 2026 CVE-2025-14574
weDocs: Sensitive information exposure
weDocs is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller.
See mitigation notes
CVE5.3
NVDPending
Dec 06, 2025 CVE-2025-12505
weDocs: A security weakness
weDocs is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.4
NVDPending
Jun 11, 2024 CVE-2024-34442
weDocs: A security weakness
weDocs is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.3
NVDPending