WP Docs

Vulnerabilities

• CVE-2023-30873

  WordPress WP Docs plugin <= 1.9.8 - Broken Access Control

  High 8.8

• CVE-2026-81782

  WordPress WP Docs plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability

  Medium 6.5

• CVE-2024-12635

  WP Docs <= 2.2.0 - Authenticated (Subscriber+) Time-Based SQL Injection via 'dir_id'

  Medium 6.5

• CVE-2026-3878

  WP Docs <= 2.2.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wpdocs_options[icon_size]'

  Medium 6.4

• CVE-2024-35696

  WordPress WP Docs plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

  Medium 6.1

• CVE-2023-32106

  WordPress WP Docs Plugin <= 1.9.9 is vulnerable to Cross Site Scripting (XSS)

  Medium 6.1

• CVE-2026-24990

  WordPress WP Docs plugin <= 2.2.8 - Broken Access Control vulnerability

  Medium 5.4

• CVE-2024-35695

  WordPress WP Docs plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

  Medium 5.4

• CVE-2024-56288

  WordPress WP Docs plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability

  Medium 4.8

• CVE-2025-31417

  WordPress WP Docs plugin < 2.2.7 - Broken Access Control vulnerability

  Medium 4.3