Knowledge Building vulnerabilities
We track 2 vulnerabilities in Knowledge Building products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 11, 2026.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest Knowledge Building vulnerabilities
- 7.1 High severity
Knowledge Building: Improper Neutralization of Input During Web Page Generation
The Knowledge Building WordPress plugin before 0.7.3 does not escape several user-supplied values before echoing them back in the response of an AJAX action available to unauthenticated users, and serves that response as HTML, leading to a Reflected Cross-Site
- 8.8 High severity
Knowledge Building: Improper Neutralization of Input During Web Page Generation
The Knowledge Building WordPress plugin before 0.7.3 does not sanitise and escape comments submitted through its reply feature, and publishes them without moderation, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against any vis