The vulnerability resides in the BetterDocs plugin for WordPress and is a classic SQL injection flaw. When a site has a supported multilingual plugin active, the plugin fails to escape the 'lang' request parameter and will concatenate its value directly into a query. Because the attacker must be authenticated with custom‑level or higher privileges, the attack is not public. Successful exploitation allows the attacker to append arbitrary SQL statements to the existing query and to read sensitive information from the database.

WordPress sites running BetterDocs plugin version 4.6.0 or earlier and that have one of the supported multilingual plugins (WPML, Polylang, qTranslate, Weglot, or TranslatePress flaw can be exploited by authenticated users with custom-level access or higher when a multilingual plugin is active. By injecting arbitrary SQL, an attacker can append statements to the existing query, potentially extracting sensitive data such as user credentials, configuration, or content from the WordPress database. The vulnerability is a.

The CVSS score of 6.5 rates the flaw as moderately severe. The EPSS score of less than 1% indicates a low probability of widespread exploitation at present, and the vulnerability is not listed in the CISA KEV catalog. Attack requires an authenticated user with custom-level or higher privileges and an active multilingual plugin, which limits exposure compared to a fully unauthenticated flaw. Nevertheless, if those conditions are met, an attacker can exfiltrate sensitive database information.