CVE-2026-6393: BetterDocs <= 4.3.11 - Missing Authorization to Authenticated (Subscriber+) Unauthorized AI API Usage
The BetterDocs plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 4.3.11. This is due to a missing capability check in the generateopenaicontentcallback() function, which relies solely on a nonce rather than verifying user permissions. This makes it possible for authenticated attackers, with subscriber-level access and above, to trigger OpenAI API calls using the site's configured API key with arbitrary user-controlled prompts, leading to unauthorized consumption of the site owner's paid AI API quota.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
wordpress/BETTERDOCSto a version that resolves this vulnerability.Fixed in 4.3.11 - Configuration
Modify BetterDocs so generate_openai_content_callback() validates the current user has an appropriate permission/capability in addition to the nonce before making OpenAI API calls. Do not rely solely on the nonce.
BetterDocs plugin for WordPress (generate_openai_content_callback()) capability check for authenticated users = Require a capability/permission check (not only a nonce) before triggering OpenAI API calls
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6393?
CVE-2026-6393 is classified as a medium severity vulnerability due to its potential for unauthorized access to AI API functionality.
How do I fix CVE-2026-6393?
To fix CVE-2026-6393, update the BetterDocs plugin to version 4.3.12 or later, which includes the necessary authorization checks.
Who is affected by CVE-2026-6393?
CVE-2026-6393 affects all installations of the BetterDocs plugin for WordPress up to and including version 4.3.11.
What type of vulnerability is CVE-2026-6393?
CVE-2026-6393 is a missing authorization vulnerability that allows unauthorized AI API usage by authenticated users.
What components are impacted by CVE-2026-6393?
CVE-2026-6393 impacts the generate_openai_content_callback() function within the BetterDocs plugin code.