weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot vulnerabilities

Product

weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot

by wedevs · last CVE Jul 3, 2026

CVEs

On KEV

6.4

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 6Low 0

Severity

Exploitation

Watch

Add weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-12731	6.4	0%	Jul 3	weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sectionTitleTag' and 'articleTitleTag' Block Attributes Affected: through 2.3.0
CVE-2026-12734	6.4	0%	Jul 3	weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'connectorWidth' Block Attribute Affected: through 2.3.0
CVE-2025-12505	5.4	0%	Dec 6	weDocs <= 2.1.14 - Missing Authorization to Settings Update Affected: through 2.1.14
CVE-2025-14574	5.3	0%	Jan 9	weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.1.15 - Unauthenticated Sensitive Information Exposure Affected: through 2.1.15
CVE-2026-12729	4.3	0%	Jul 3	weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.3.0 - Missing Authorization to Authenticated (Subscriber+) Data Migration via wedocs_migrate_betterdocs_to_wedocs AJAX Action Affected: through 2.3.0
CVE-2025-13921	4.3	0%	Jan 23	weDocs <= 2.1.16 - Missing Authorization to Authenticated (Subscriber+) Documentation Post Update Affected: through 2.1.16