{"id":"CVE-2025-7499","aliases":["EUVD-2025-25137","GHSA-794g-99g6-6855"],"status":"published","title":"BetterDocs  \u003c= 4.1.1 - Missing Authorization to Private And Password-Protected Posts Information Disclosure","description":"The BetterDocs – Advanced AI-Driven Documentation, FAQ \u0026 Knowledge Base Tool for Elementor \u0026 Gutenberg with Encyclopedia, AI Support, Instant Answers plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the get_response function in all versions up to and including 4.1.1. This makes it possible for unauthenticated attackers to retrieve passwords for password-protected documents as well as the metadata of private and draft documents.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00325,"percentile":0.25752,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-862"],"published":"2025-08-16T07:25:29Z","modified":"2026-06-17T10:05:05Z","products":[{"vendor":"wpdevteam","product":"betterdocs –  knowledge base docs \u0026 faq solution for elementor \u0026 block editor"}],"references":[{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5231b741-4d02-45b5-b2aa-0d9d3536a416?source=cve"},{"url":"https://plugins.trac.wordpress.org/browser/betterdocs/tags/4.1.0/includes/REST/DocCategories.php#L82"},{"url":"https://plugins.trac.wordpress.org/changeset/3338384/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-7499"},{"url":"https://plugins.trac.wordpress.org/changeset/3338384"},{"url":"https://github.com/advisories/GHSA-794g-99g6-6855"}],"sources":{"cve":[{"id":"CVE-2025-7499","title":"BetterDocs  \u003c= 4.1.1 - Missing Authorization to Private And Password-Protected Posts Information Disclosure","description":"The BetterDocs – Advanced AI-Driven Documentation, FAQ \u0026 Knowledge Base Tool for Elementor \u0026 Gutenberg with Encyclopedia, AI Support, Instant Answers plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the get_response function in all versions up to and including 4.1.1. This makes it possible for unauthenticated attackers to retrieve passwords for password-protected documents as well as the metadata of private and draft documents.","status":"published","published":"2025-08-16T07:25:29.205Z","modified":"2026-04-08T16:52:45.681Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:32:51.544289Z"}],"euvd":[{"id":"EUVD-2025-25137","description":"The BetterDocs – Advanced AI-Driven Documentation, FAQ \u0026 Knowledge Base Tool for Elementor \u0026 Gutenberg with Encyclopedia, AI Support, Instant Answers plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the get_response function in all versions up to and including 4.1.1. This makes it possible for unauthenticated attackers to retrieve passwords for password-protected documents as well as the metadata of private and draft documents.","status":"published","published":"2025-08-16T07:25:29Z","modified":"2026-04-08T16:52:45Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T19:24:58.604017Z"}],"ghsa":[{"id":"GHSA-794g-99g6-6855","title":"The BetterDocs – Advanced AI-Driven Documentation, FAQ \u0026 Knowledge Base Tool for Elementor \u0026...","description":"The BetterDocs – Advanced AI-Driven Documentation, FAQ \u0026 Knowledge Base Tool for Elementor \u0026 Gutenberg with Encyclopedia, AI Support, Instant Answers plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the get_response function in all versions up to and including 4.1.1. This makes it possible for unauthenticated attackers to retrieve passwords for password-protected documents as well as the metadata of private and draft documents.","status":"published","published":"2025-08-16T09:31:32Z","modified":"2025-08-16T09:31:40Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T15:03:19.722468Z"}],"nvd":[{"id":"CVE-2025-7499","description":"The BetterDocs – Advanced AI-Driven Documentation, FAQ \u0026 Knowledge Base Tool for Elementor \u0026 Gutenberg with Encyclopedia, AI Support, Instant Answers plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the get_response function in all versions up to and including 4.1.1. This makes it possible for unauthenticated attackers to retrieve passwords for password-protected documents as well as the metadata of private and draft documents.","status":"published","published":"2025-08-16T08:15:26.4Z","modified":"2026-06-17T10:05:05.257Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:11:24.730342Z"}]}}