CVE-2026-121862

The Knowledge Building WordPress plugin before version 0.7.3 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to sanitise and escape comments submitted via the plugin's reply feature , specifically involving the knbu_new_reply AJAX Action . Because these comments a...