Plugin icon

WP Docs

wp-docs

Vulnerabilities:

8

Last Updated:

June 5, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-04-15
Title
WP Docs < 2.3.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wpdocs_options[icon_size]'
Fixed in
Fixed in 2.3.0
CVSS
6.4 (medium)
Published
2026-01-21
Title
WP Docs < 2.2.9 - Missing Authorization
Fixed in
Fixed in 2.2.9
CVSS
4.3 (medium)
Published
2025-03-29
Title
WP Docs < 2.2.7 - Missing Authorization
Fixed in
Fixed in 2.2.7
CVSS
4.3 (medium)
Published
2025-01-03
Title
WP Docs < 2.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.2.2
CVSS
4.4 (medium)
Published
2024-12-20
Title
WP Docs < 2.2.1 - Authenticated (Subscriber+) Time-Based SQL Injection via 'dir_id'
Fixed in
Fixed in 2.2.1
CVSS
6.5 (medium)
Published
2024-06-06
Title
WP Docs < 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.1.4
CVSS
6.4 (medium)
Published
2024-06-06
Title
WP Docs < 2.1.4 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.1.4
CVSS
6.1 (medium)
Published
2023-08-18
Title
WP Docs < 2.0.0 - Reflected XSS
Fixed in
Fixed in 2.0.0
CVSS
7.1 (high)