PT-2026-20730 · WordPress · Echoplugins Knowledge Base For Documentation

Nabil Irawan · Published 2026-02-19 · Updated 2026-02-19 · CVE-2026-25402

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions echoplugins Knowledge Base for Documentation, FAQs with AI Assistance versions through 16.011.0

Description An authorization issue exists in echoplugins Knowledge Base for Documentation, FAQs with AI Assistance echo-knowledge-base. The issue involves exploiting incorrectly configured access control security levels.

Recommendations Update to a version later than 16.011.0.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-25402

Affected Products

Echoplugins Knowledge Base For Documentation

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-25402 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/echo-knowledge-base/vulnerability/wordpress-knowledge-base-for-documentation-faqs-with-ai-assistance-plugin-16-011-0-broken-access-control-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2024411355952865422 · Twitter Post