CYBERHAWK / CVE / CVE-2026-7515

CVE-2026-7515

CRITICAL CVSS 9.8 other

The flaw

The BetterDocs Pro plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 3.8.0 via the `doc_style` parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php

What to do

Review advisory and patch per vendor guidance.

▸ Scan my repo for CVE-2026-7515

References

First seen 2026-06-19 · Tracked by PickBits CyberHawk · Weekly CVE digest