weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.6.2 - Unauthenticated Sensitive Information Exposure via REST Sub-Routes, Search, and Contributors Endpoints
- ID
- WPSEC-2026-2579
- Plugin
- weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot (wedocs)
- Affected
- from 1.5 before 2.6.3
- Remediation
- Update to 2.6.3 or later.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weakness
- CWE-200
- Usage
- Plugin Low · Affected versions Low among sites WPSec scans, 2026-11-05
- Attack surface
- weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot on WPSec AttackSurface
- Fix released
- Published
Description
The weDocs plugin for WordPress is vulnerable to Sensitive Information Exposure via the /wp/v2/docs/{id}/parents and /wp/v2/docs/{id}/ai-summary REST routes, the docs REST search, the Quick Search AJAX action and the contributors REST endpoint in all versions up to, and including, 2.6.2. This is due to the plugin checking only the status of the requested section or article, not of the doc above it. The parents route also returns the top-level doc with its rendered content even when that doc is a draft or private. This makes it possible for unauthenticated attackers to read the title and content of draft and private docs, and the sections, articles and related data under them, by requesting a published section or article that belongs to them.
References
- https://wpsec.com/vuln/WPSEC-2026-2579/
- https://plugins.svn.wordpress.org/wedocs/tags/2.6.3/
- https://wordpress.org/plugins/wedocs/
Published by WPSec. Provided as is, without warranty. Corrections: contact us.
This advisory as JSON or Markdown · All advisories: JSON, RSS