CVE-2026-66589

A missing authorization vulnerability in B2BKing allows attackers to exploit incorrectly configured access control security levels, potentially granting unauthorized access to sensitive functionalities. Organizations using B2BKing versions up to 5.2.30 should prioritize remediation to mitigate the risk of unauthorized actions within their systems. This vulnerability poses a medium severity risk, making it essential for businesses relying on this plugin to assess their configurations and apply necessary updates.