Cross Site Scripting Vulnerability in Knowledge Base Plugin by Echo
CVE-2026-28187

7.1HIGH

Key Information:

Vendor

WordPress
Status
Knowledge Base For Documentation, Faqs With Ai Assistance
Vendor
CVE Published:
13 August 2026

What is CVE-2026-28187?

A vulnerability has been identified in the Knowledge Base for Documentation, FAQs with AI Assistance plugin, impacting versions up to 17.211.0. This issue allows unauthenticated attackers to exploit cross-site scripting (XSS) vulnerabilities, potentially compromising user data and site integrity. Proper mitigation measures should be implemented to safeguard against these security risks.

Affected Version(s)

Knowledge Base for Documentation, FAQs with AI Assistance <= 17.211.0

References

https://patchstack.com/database/wordpress/plugin/echo-kno...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Coopernicus | Patchstack Bug Bounty Program
.