CVE-2026-7515Disclosure

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The BetterDocs Pro plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 3.8.0 via the `doc_style` parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-98

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • Peaked 1d ago at 2 mentions (2026-06-19); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-06-19: 2Mentions · 2026-06-20: 1Technical Details · 2026-06-19: 2Technical Details · 2026-06-20: 106-1906-20
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-06-192
Disclosure2
2026-06-201
Disclosure1
Full discourse3 posts
  • ADK Cyber@ADKCyber
    Disclosure

    CVE-2026-7515 (CVSS 9.8) affects BetterDocs Pro for WordPress. Organizations using versions <=3.8.0 should review and update the plugin. https://nvd.nist.gov/vuln/detail/CVE-2026-7515 via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/dcfHBxyooH

    Post summary

    CVE-2026-7515 is a high‑severity vulnerability affecting BetterDocs Pro for WordPress; the notice advises reviewing and updating affected plugin versions and directs readers to the NVD entry for more details.

    0000043
    92 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-7515 The BetterDocs Pro plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 3.8.0 via the `doc_style` parameter. This makes it possi… https://www.cve.org/CVERecord?id=CVE-2026-7515 ----- Traducción: CVE-2026-7515 El … http://infoflow.cloud`

    Post summary

    The text announces the CVE‑2026‑7515 vulnerability, detailing a Local File Inclusion flaw in BetterDocs Pro WordPress plugin versions up to 3.8.0 via the `doc_style` parameter.

    0000035
    82 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-7515 The BetterDocs Pro plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 3.8.0 via the `doc_style` parameter. This makes it possi… https://www.cve.org/CVERecord?id=CVE-2026-7515

    Post summary

    The text announces that the BetterDocs Pro WordPress plugin (up to v3.8.0) is vulnerable to local file inclusion via the `doc_style` parameter, with no PoC, exploit, patch, or active exploitation details provided.

    00000154
    57.6K followersView on X

Explore more