BetterDocs WordPress Plugin Sensitive Information Exposure Vulnerability

Vulnerability

A vulnerability allowing sensitive information exposure has been identified in the BetterDocs plugin for WordPress, affecting all versions through 4.3.3. The issue arises in the scripts() function, where authenticated attackers with contributor-level access or higher can access sensitive data, including the OpenAI API key stored in the plugin's settings.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, such as the OpenAI API key, which could be misused or cause further security issues.

Remediation

Users are advised to update the BetterDocs WordPress plugin to version 4.3.4 or a later patched version.

Added: Jan 9, 2026, 7:25 AM
Updated: Jan 9, 2026, 7:25 AM

Vulnerability Rating

Custom Algorithm
spread
3.4
impact
2.5
exploitability
6.1
remediation
7.7
relevance
2.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.