Software intelligence
Important: Wedocs appearing in this catalog does not mean your website is affected. Exposure depends on your installed version. How SiteRespond intelligence works
Tracked advisories
10
Latest advisory
2 July 2026
CISA KEV matches
0
In this WordPress feed
WordPress slug
wedocs
Plugin
This catalog lists 10 known advisories affecting Wedocs. The most recent was published on 2 July 2026. If you use this software, compare your installed version against the affected ranges on each advisory and update to a fixed release outside those ranges. SiteRespond Defence checks your actual installed version when the plugin is connected — listing here does not by itself mean your site is vulnerable.
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'connectorWidth' Block Attribute
May allow attackers to run scripts in visitors' browsers or hijack admin sessions.
Published 2 July 2026
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.3.0 - Missing Authorization to Authenticated (Subscriber+) Data Migration via wedocs_migrate_betterdocs_to_wedocs AJAX Action
This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.
Published 2 July 2026
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sectionTitleTag' and 'articleTitleTag' Block Attributes
May allow attackers to run scripts in visitors' browsers or hijack admin sessions.
Published 2 July 2026
Known Wedocs advisories published by month.
CVE-2026-12734 · Published 2 July 2026
Affected versions: ≤ 2.3.0
CVE-2026-12729 · Published 2 July 2026
Affected versions: ≤ 2.3.0
CVE-2026-12731 · Published 2 July 2026
Affected versions: ≤ 2.3.0
CVE-2026-39520 · Published 25 February 2026
Affected versions: ≤ 2.1.18
CVE-2025-13921 · Published 22 January 2026
Affected versions: ≤ 2.1.16
CVE-2025-14574 · Published 8 January 2026
Affected versions: ≤ 2.1.15
CVE-2025-12505 · Published 5 December 2025
Affected versions: ≤ 2.1.14
CVE-2024-34442 · Published 7 May 2024
Affected versions: ≤ 2.1.4
No CVE assigned · Published 16 December 2022
Affected versions: ≥ 1.6 and ≤ 1.7.5
CVE-2022-47150 · Published 14 December 2022
Affected versions: ≥ 1.6 and ≤ 1.7.5
SiteRespond Defence matches your installed Wedocs version against this catalog when the Defence plugin is connected to your WordPress site.