CVE-2026-101935

The Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'newkbconfig' parameter specifically the article-mobile-break-point-v2 key, among other config keys interpolated into the element in versions up to, and...

CVE-2026-101935

The Echo Knowledge Base WordPress plugin (versions up to and including 17.214.0 ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The flaw exists due to insufficient input sanitization and output escaping within the EPKB_Frontend_Editor::fe_preview_config() and EPKB_Articles_Setup functio...

EUVD-2026-111818

The Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'newkbconfig' parameter specifically the article-mobile-break-point-v2 key, among other config keys interpolated into the element in versions up to, and...