CVE-2026-101935

The Echo Knowledge Base WordPress plugin (versions up to and including 17.214.0 ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The flaw exists due to insufficient input sanitization and output escaping within the EPKB_Frontend_Editor::fe_preview_config() and EPKB_Articles_Setup functio...

CVE-2026-101935 Echo Knowledge Base <= 17.214.0 - Reflected Cross-Site Scripting via 'new_kb_config' Parameter

The Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'newkbconfig' parameter specifically the article-mobile-break-point-v2 key, among other config keys interpolated into the element in versions up to, and...

EUVD-2026-111818

The Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'newkbconfig' parameter specifically the article-mobile-break-point-v2 key, among other config keys interpolated into the element in versions up to, and...

PT-2026-127895

The Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'new kb config' parameter specifically the article-mobile-break-point-v2 key, among other config keys interpolated into the element in versions up to, an...