The BetterDocs – Advanced AI-Driven Documentation, FAQ & Knowledge Base Tool for Elementor & Gutenberg is vulnerable to unauthorized data access due to a missing capability check on the get_response function in all versions up to and including 4.1.1. This vulnerability allows unauthenticated attackers to retrieve passwords for password-protected documents and metadata of private and draft documents.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.3 | CVE-2025-7499 |
Exploitation
To exploit this vulnerability, an attacker can send a request to the get_response function without authentication, allowing them to access sensitive information such as passwords for protected documents and metadata for private or draft documents.
Affected Products
- BetterDocs – Advanced AI-Driven Documentation: A WordPress plugin that provides documentation and FAQ support, vulnerable in versions up to 4.1.1.
Mitigation
To mitigate this vulnerability, it is recommended to update the BetterDocs plugin to the latest version where the capability check has been implemented to prevent unauthorized access to sensitive data.