Skip to content
OpenAdvisories
High · 7.1 CVE-2025-52791 EUVD-2025-28466GHSA-mc9h-2q55-83jv

WordPress Knowledge Base – Knowledge Base Maker plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) Vulnerability

Published Jun 20, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in devfelixmoira Knowledge Base – Knowledge Base Maker knowledge-base-maker allows Stored XSS.This issue affects Knowledge Base – Knowledge Base Maker: from n/a through <= 1.1.8.

Affected products

VendorProductAffectedFixed
devfelixmoira Knowledge Base – Knowledge Base Maker ≤ 1.1.8 —

References