Vulnerabilidades do Fahadmahmood WP Docs
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Fahadmahmood WP Docs: 3 registro(s), com versões afetadas e correções.
CVE-2026-81782
Média · 6.5
CWE-79 10/09/2026
WordPress WP Docs plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting (XSS) in WP Docs <= 2.3.1 versions.
CVE-2026-3878
Média · 6.4
CWE-79 16/04/2026
WP Docs <= 2.2.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wpdocs_options[icon_size]'
The WP Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpdocs_options[icon_size]' parameter in all versions up to, and including, 2.2.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2026-24990
Média · 5.4
CWE-862 03/02/2026
WordPress WP Docs plugin <= 2.2.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through <= 2.2.8.