{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-01T03:16:26.524","vulnerabilities":[{"cve":{"id":"CVE-2025-14980","sourceIdentifier":"security@wordfence.com","published":"2026-01-09T07:16:01.913","lastModified":"2026-06-17T08:36:53.053","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The BetterDocs plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3.3 via the scripts() function. This makes it possible for authenticated attackers, with contributor-level access and above, to extract sensitive data including the OpenAI API key stored in plugin settings."},{"lang":"es","value":"El plugin BetterDocs para WordPress es vulnerable a la Exposición de Información Sensible en todas las versiones hasta la 4.3.3, inclusive, a través de la función scripts(). Esto permite a atacantes autenticados, con acceso de nivel de colaborador o superior, extraer datos sensibles, incluyendo la clave API de OpenAI almacenada en la configuración del plugin."}],"affected":[{"source":"security@wordfence.com","affectedData":[{"vendor":"wpdevteam","product":"BetterDocs –  Knowledge Base Docs & FAQ Solution for Elementor & Block Editor","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"4.3.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security@wordfence.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-01-09T18:24:31.739287Z","id":"CVE-2025-14980","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@wordfence.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]}],"references":[{"url":"https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3430424%40betterdocs%2Ftags%2F4.3.4&old=3422660%40betterdocs%2Ftrunk","source":"security@wordfence.com"},{"url":"https://research.cleantalk.org/cve-2025-14980/","source":"security@wordfence.com"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1595f231-d300-484a-a0e1-1e2bc7b82ed3?source=cve","source":"security@wordfence.com"}]}}]}