CVE-2026-65562

WordPress BetterDocs plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting (XSS) in BetterDocs <= 4.6.2 versions.

We have discovered 1,632 live websites that are affected by CVE-2026-65562.

Run a Free Instant Scan



Affected Software

Product  BetterDocs plugin
Category Wordpress Plugins
Vulnerable Domains1,632 live websites (100% of BetterDocs plugin install base)
Vulnerable Versions
  • from 0 through 4.6.2
Vulnerable Versions Count77 versions ( 100% of all versions)


Common Weakness Enumeration

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')



Details

  • Published - Jul 27, 2026
  • Updated - Jul 27, 2026

Credits

  • Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2026-65562
United States662 websites


Germany143 websites
GB75 websites
France59 websites
Netherlands55 websites
Brazil38 websites
Canada37 websites
Cyprus35 websites
Russia35 websites
Australia31 websites

Website Distribution by TLD

Number of websites using CVE-2026-65562
.com748 websites
.org113 websites
.de67 websites
.nl44 websites
.co.uk39 websites
.net37 websites
.com.br33 websites
.ru27 websites
.com.au27 websites
.co19 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-65562

Top websites that are affected by CVE-2026-65562. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
***********.com United States*,***
*********.com United States*,***
***********.com Germany**,***
*****.ir Iran**,***
************.com United States**,***
****.gr Greece**,***
****************.com United States***,***
************************.net United States***,***
*********.com United States***,***
********.com United States***,***
See full domain list

FAQ

CVE-2026-65562 is Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in BetterDocs plugin
A total of 1,632 websites have been identified as vulnerable to CVE-2026-65562, based on global website indexing conducted by WebTechSurvey.
The BetterDocs plugin is affected by the CVE-2026-65562 vulnerability.
BetterDocs plugin versions up to and including 4.6.2 are vulnerable to CVE-2026-65562.