Vulnerabilities

TI-2026-79204 CVE-2026-111847 · GHSA-g5mj-qhrm-784p

Missing authorization in WordPress MarketKing plugin

LOW 24

Missing Authorization vulnerability in Kings Plugins MarketKing marketking-multivendor-marketplace-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MarketKing: fr…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00193 Published 2026-10-22 No fix listed CWE-862

TI-2026-58582 CVE-2026-85311 · GHSA-4j6r-jmmc-298x

WordPress MarketKing plugin <= 2.1.60 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in Kings Plugins MarketKing allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00294 Published 2026-09-04 No fix listed CWE-862

TI-2026-47260 CVE-2026-66589 · GHSA-9cx2-qw86-5677

WordPress B2BKing plugin <= 5.2.30 - Broken Access Control vulnerability

LOW 24

Missing Authorization vulnerability in Kings Plugins B2BKing allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0023 Published 2026-08-18 No fix listed CWE-862

TI-2026-21764 CVE-2026-27346 · GHSA-8x2q-39xh-589q

WordPress B2BKing plugin < 5.2.10 - Broken Access Control vulnerability

LOW 22

Missing Authorization vulnerability in Kings Plugins B2BKing allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00254 Published 2026-05-25 Fixed in 5.2.10 CWE-862

TI-2026-22447 CVE-2026-28106 · GHSA-8xm2-w3mq-82vh

WordPress B2BKing Premium plugin < 5.4.20 - Open Redirection vulnerability

LOW 21

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Kings Plugins B2BKing Premium allows Phishing.This issue affects B2BKing Premium: from n/a before 5.4.20.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00295 Published 2026-03-06 Fixed in 5.4.20 CWE-601