WeDevs weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot

• CVE-2026-104760 Medium 6.4 weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'modalPlaceholder' Block Attribute –
• CVE-2026-12731 Medium 6.4 weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sectionTitleTag' and 'articleTitleTag' Block Attributes 0.3%
• CVE-2026-12729 Medium 4.3 weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.3.0 - Missing Authorization to Authenticated (Subscriber+) Data Migration via wedocs_migrate_betterdocs_to_wedocs AJAX Action 0.4%
• CVE-2026-12734 Medium 6.4 weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'connectorWidth' Block Attribute 0.3%
• CVE-2025-13921 Medium 4.3 weDocs <= 2.1.16 - Missing Authorization to Authenticated (Subscriber+) Documentation Post Update 0.3%
• CVE-2025-14574 Medium 5.3 weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.1.15 - Unauthenticated Sensitive Information Exposure 0.4%
• CVE-2025-12505 Medium 5.4 weDocs <= 2.1.14 - Missing Authorization to Settings Update 0.2%