Aller au contenu
5.3 Moyenne

CVE-2025-14574 The weDocs plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,…

Description

The weDocs plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.15 via the `/wp-json/wp/v2/docs/settings` REST API endpoint. This makes it possible for unauthenticated attackers to extract sensitive data including third party services API keys.

Produits et versions touchés

Produit Versions touchées Corrigé en
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot 2.1 premières → 2.1.15 Pas de correctif indiqué
Les 6 CVE de weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot →
Suivre cette CVE