Kings Plugins B2BKing vulnerabilities

Latest Kings Plugins B2BKing CVEs

Newest publication first

1. CVE-2026-66589 WordPress B2BKing plugin <= 5.2.30 - Broken Access Control vulnerability

   Published 2026-08-18

   Medium·CVSS 5.4 EPSS 0.23%

   Missing Authorization vulnerability in Kings Plugins B2BKing allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects B2BKing: from n/a through 5.2.30.

2. CVE-2026-27346 WordPress B2BKing plugin < 5.2.10 - Broken Access Control vulnerability

   Published 2026-05-25

   Medium·CVSS 4.9 EPSS 0.25%

   Missing Authorization vulnerability in Kings Plugins B2BKing allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects B2BKing: from n/a before 5.2.10.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.