echoplugins
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Knowledge Base for Documentation, FAQs with AI Assistance | 2 | – | Aug 13, 2026 |
| Creative Addons for Elementor | 1 | – | Apr 2, 2024 |
| Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search | 1 | – | Oct 28, 2026 |
Exploited and recent CVEs
- CVE-2026-101935 Echo Knowledge Base <= 17.214.0 - Reflected Cross-Site Scripting via 'new_kb_config' Parameter 0.3%
- CVE-2026-28187 WordPress Knowledge Base for Documentation, FAQs with AI Assistance plugin <= 17.211.0 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2026-25402 WordPress Knowledge Base for Documentation, FAQs with AI Assistance plugin <= 16.011.0 - Broken Access Control vulnerability 0.2%
- CVE-2024-2924 Creative Addons for Elementor <= 1.5.12 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%