CVE Catalog
CVE-2026-66589
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk0.14%
4th percentile - higher than 4% of all known CVEs
Summary
Missing Authorization vulnerability in Kings Plugins B2BKing allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects B2BKing from n/a through 5.2.30.
Risk Assessment
An unauthorized person may gain access to functions or data they should not have access to, potentially leading to confidentiality or integrity breaches.
Recommendation
Update the B2BKing plugin to a version newer than 5.2.30 if available, and review access control configuration.
Original NVD description (English source)
Missing Authorization vulnerability in Kings Plugins B2BKing allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects B2BKing: from n/a through 5.2.30.