Skip to content
OpenAdvisories

Product · ajay

Knowledge Base

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.4
    CVE-2025-7431 Public exploit

    Knowledge Base <= 2.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Slug

    The Knowledge Base plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin slug setting in all versions up to, and including, 2.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated a…

    ajay Knowledge Base Web / CMS
  • Medium 6.4
    CVE-2025-5533

    Knowledge Base <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Knowledge Base plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'kbalert' shortcode in all versions up to, and including, 2.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This …

    ajay Knowledge Base Web / CMS
  • Medium 6.5
    CVE-2024-51677

    WordPress Knowledge Base plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajay Knowledge Base knowledgebase allows Stored XSS.This issue affects Knowledge Base: from n/a through <= 2.2.0.

    ajay Knowledge Base