CVE-2023-3126: Missing Authorization

The B2BKing plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'b2bkingdownloadpricelist' function in versions up to, and including, 4.6.00. This makes it possible for Authenticated attackers with subscriber or customer-level permissions to...

PT-2023-23268

Name of the Vulnerable Software and Affected Versions B2BKing plugin for WordPress versions up to, and including, 4.6.00 Description The issue allows unauthorized access to data due to a missing capability check on the b2bkingdownloadpricelist function. This enables authenticated attackers with...