{
 "id": "WPSEC-2026-1235",
 "url": "https://wpsec.com/vuln/WPSEC-2026-1235/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-1235/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-1235/index.md",
 "title": "Echo Knowledge Base – Documentation, FAQs, AI Chat & AI Search <= 17.311.0 - Unauthenticated Missing Authorization to AI Chat and AI Search REST Endpoints and Restricted Collections",
 "description": "The Echo Knowledge Base plugin for WordPress is vulnerable to unauthorized access via its public AI Chat and AI Search REST endpoints in all versions up to, and including, 17.311.0. This is due to missing authorization checks. The endpoints only checked that the feature was not turned 'off', so they stayed open to everyone while AI Chat or AI Search was in the administrator-only 'preview' mode. The AI Chat collection check also accepted any training data collection ID in the 'all pages' and 'all except' display modes, and in 'selected only' mode it accepted collections assigned to saved but inactive chat locations. This makes it possible for unauthenticated attackers to use AI Chat and AI Search before the administrator has made them public, and to query AI training data collections that are not assigned to any active chat location.",
 "plugin": {
  "slug": "echo-knowledge-base",
  "name": "Echo Knowledge Base – Documentation, FAQs, AI Chat & AI Search",
  "full_name": "Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search",
  "wordpress_org": "https://wordpress.org/plugins/echo-knowledge-base/",
  "advisories_url": "https://wpsec.com/vuln/plugin/echo-knowledge-base/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/echo-knowledge-base"
 },
 "type": "NO AUTHORISATION",
 "cwe": [
  "CWE-862"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 4.8,
  "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "17.311.1",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 17.311.1"
  ]
 },
 "introduced_in": null,
 "fixed_in": "17.311.1",
 "remediation": "Update to 17.311.1 or later.",
 "fix_released": "2026-10-17T20:01:42+00:00",
 "published": "2026-10-18T20:43:08+00:00",
 "updated": "2026-10-18T10:55:40.981814+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-1235/",
  "https://plugins.svn.wordpress.org/echo-knowledge-base/tags/17.311.1/",
  "https://wordpress.org/plugins/echo-knowledge-base/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/echo-knowledge-base",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Low",
  "affected_versions": "None seen",
  "as_of": "2026-10-18"
 }
}