Volerion logoVolerion
Volerion logoVolerion

Kings Plugins B2BKing Broken Access Control Vulnerability

Vulnerability

A missing authorization vulnerability in the B2BKing plugin for WordPress allows exploitation of improperly configured access control levels. This issue affects versions prior to 5.2.10.

Impact

Exploitation of this vulnerability could allow an unprivileged user to perform actions reserved for higher privileges, such as a shop manager.

Remediation

Users of the B2BKing WordPress plugin should update to version 5.2.10 or later. Patchstack users can enable auto-update for vulnerable plugins.

Added: May 26, 2026, 6:11 PM
Updated: May 26, 2026, 6:11 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
2.5
exploitability
5.2
remediation
0.0
relevance
9.4
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.