CVE-2024-2845 BetterDocs – Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer For Elementor & Gutenberg <= 3.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

🗓️ 09 Apr 2024 18:58:40Reported by WordfenceType

Vulnerability in BetterDocs plugin for WordPress version 3.4.2

Reporter	Title	Published	Views	Family All 10
CNNVD	WordPress Plugin BetterDocs 安全漏洞	9 Apr 202400:00	–	cnnvd
CVE	CVE-2024-2845	9 Apr 202418:58	–	cve
EUVD	EUVD-2024-27789	3 Oct 202520:07	–	euvd
NVD	CVE-2024-2845	9 Apr 202419:15	–	nvd
Patchstack	WordPress BetterDocs Plugin <= 3.4.2 is vulnerable to Cross Site Scripting (XSS)	26 Mar 202400:00	–	patchstack
Positive Technologies	PT-2024-22441 · WordPress · The Betterdocs	9 Apr 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-2845	7 Jan 202609:15	–	redhatcve
Vulnrichment	CVE-2024-2845 BetterDocs – Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer For Elementor & Gutenberg <= 3.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	9 Apr 202418:58	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (March 25, 2024 to March 31, 2024)	4 Apr 202417:35	–	wordfence
WPVulnDB	BetterDocs – Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer For Elementor & Gutenberg < 3.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	25 Mar 202400:00	–	wpvulndb

[
  {
    "vendor": "wpdevteam",
    "product": "BetterDocs –  Knowledge Base Docs & FAQ Solution for Elementor & Block Editor",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "3.4.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/2d113191-b550-4752-b536-644206ab56c1
plugins	www.plugins.trac.wordpress.org/changeset

08 Apr 2026 16:44Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.16.4

EPSS0.00196

CWE-79