Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:b2bking_—_ultimate_woocommerce_b2b_and_wholesale_plugin_—_wholesale_prices,_bulk_order_form_&_more:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductB2Bking — Ultimate Woocommerce B2B And Wholesale Plugin — Wholesale Prices, Bulk Order Form & More (e37a057a-cca9-584a-b875-e0384b24d45a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-85038 vulnerable 2026-09-16 04:33:08.064057 B2BKing < 5.2.40 - Unauthenticated B2B Group Assignment and Approval Bypass via Registration Role Selection
The B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More WordPress plugin before 5.2.40 does not verify that a role selected during registration is one actually offered on the registration form, allowing unauthenticated users to assign themselves to restricted B2B customer groups and to skip the manual account-approval workflow during self-registration.
Published: 2026-09-06T06:00:04.787Z
Updated: 2026-09-06T10:44:10.785Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.