The B2BKing plugin for WordPress is not secure in versions up to 4.6.00. If a malicious user has an account with subscriber or customer-level permissions, they can access the pricing list of all products on the website without authorization. This vulnerability can be exploited to access sensitive data.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
