Read the docs

echoplugins

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

echoplugins records in CISA KEV

No echoplugins vulnerabilities are listed in CISA KEV.

Records

5 records

Priority MEDIUM 40

Deserialization of Untrusted Data vulnerability in Echo Plugins Knowledge Base for Documentation, FAQs with AI Assistance.This issue affects Knowledge Base for Documentation, FAQs with AI Assistance: from n/a through 11.…

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.00465 Published 2024-03-27 No fix listed CWE-502
Priority LOW 28

The Creative Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all versions up to, and including, 1.5.12 due to insufficient input sanitization and output…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00324 Published 2024-04-02 No fix listed CWE-79
Priority LOW 27

The Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'new_kb_config' parameter (specifically the article-mobile-break-point-v2 ke…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00254 Published 2026-10-28 No fix listed CWE-79
Priority LOW 19

Missing Authorization vulnerability in echoplugins Knowledge Base for Documentation, FAQs with AI Assistance echo-knowledge-base allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00215 Published 2026-02-19 No fix listed CWE-862
Open these records in search →