WordPress Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search plugin <= 17.214.0 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by crow in WordPress Plugin Knowledge Base for Documentation, FAQs with AI Assistance versions = 17.214.0...

CVE-2026-101935

The Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'newkbconfig' parameter specifically the article-mobile-break-point-v2 key, among other config keys interpolated into the element in versions up to, and...

CVE-2026-101935

The Echo Knowledge Base WordPress plugin (versions up to and including 17.214.0 ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The flaw exists due to insufficient input sanitization and output escaping within the EPKB_Frontend_Editor::fe_preview_config() and EPKB_Articles_Setup functio...

CVE-2026-101935 Echo Knowledge Base <= 17.214.0 - Reflected Cross-Site Scripting via 'new_kb_config' Parameter

The Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'newkbconfig' parameter specifically the article-mobile-break-point-v2 key, among other config keys interpolated into the element in versions up to, and...

EUVD-2026-111818

The Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'newkbconfig' parameter specifically the article-mobile-break-point-v2 key, among other config keys interpolated into the element in versions up to, and...

PT-2026-127895

The Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'new kb config' parameter specifically the article-mobile-break-point-v2 key, among other config keys interpolated into the element in versions up to, an...

CVE-2026-25402 WordPress Knowledge Base for Documentation, FAQs with AI Assistance plugin <= 16.011.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in echoplugins Knowledge Base for Documentation, FAQs with AI Assistance echo-knowledge-base allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Knowledge Base for Documentation, FAQs with AI Assistance: from n/a through =...