CVE-2026-12157 | wpdevteam BetterDocs Plugin up to 4.5.3 on WordPress Block Attribute render blockId cross site scripting

June 19, 2026 Yanac

A vulnerability, which was classified as problematic, was found in wpdevteam BetterDocs Plugin up to 4.5.3 on WordPress. This issue affects the function CategorySlateLayout::render of the component Block Attribute Handler. Such manipulation of the argument blockId leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-12157. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More