b1accounting

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

b1accounting records in CISA KEV

No b1accounting vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-06101 CVE-2025-6718 · GHSA-5m7q-7ppx-2j6f

B1.lt for WooCommerce <= 2.2.57 - Missing Authorization to Authenticated (Subscriber+) Arbitrary SQL Injection

MEDIUM 40

The B1.lt plugin for WordPress is vulnerable to SQL Injection due to a missing capability check on the b1_run_query AJAX action in all versions up to, and including, 2.2.57.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00355 Published 2025-07-18 No fix listed CWE-862

TI-2025-06100 CVE-2025-6717 · GHSA-24mc-xgf8-3534

B1.lt for WooCommerce <= 2.2.56 - Authenticated (Subscriber+) SQL Injection

LOW 29

The B1.lt plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 2.2.56 due to insufficient escaping on the user supplied parameter and lack of sufficient prepara…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00341 Published 2025-07-18 No fix listed CWE-89

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0