Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: echoplugins Clear all filters
TI-2026-81764 CVE-2026-101935 · GHSA-7f9m-hhf7-j63p

Reflected XSS in Echo Knowledge Base WordPress plugin

Priority LOW 27

The Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'new_kb_config' parameter (specifically the article-mobile-break-point-v2 ke…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00254 Published 2026-10-28 No fix listed CWE-79
TI-2026-20520 CVE-2026-25402 · GHSA-xwm4-xpf9-mh28

Missing authorization in echoplugins Knowledge Base for Documentation, FAQs with AI…

Priority LOW 19

Missing Authorization vulnerability in echoplugins Knowledge Base for Documentation, FAQs with AI Assistance echo-knowledge-base allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00215 Published 2026-02-19 No fix listed CWE-862
TI-2024-02732 CVE-2024-2924 · GHSA-qgxc-w9wg-wrgc

Creative Addons for Elementor <= 1.5.12 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The Creative Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all versions up to, and including, 1.5.12 due to insufficient input sanitization and output…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00324 Published 2024-04-02 No fix listed CWE-79
TI-2024-16359 CVE-2024-24842 · GHSA-xx5f-qgcw-mf6j

Deserialization of untrusted data in echoplugins Knowledge Base for Documentation, FAQs…

Priority MEDIUM 40

Deserialization of Untrusted Data vulnerability in Echo Plugins Knowledge Base for Documentation, FAQs with AI Assistance.This issue affects Knowledge Base for Documentation, FAQs with AI Assistance: from n/a through 11.…

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.00465 Published 2024-03-27 No fix listed CWE-502