CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2026-28106

WordPress B2BKing Premium plugin < 5.4.20 - Open Redirection vulnerability

Status: Published
Published: 2026-03-06
Updated: 2026-03-09
Assigning organization: Patchstack

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Kings Plugins B2BKing Premium allows Phishing.This issue affects B2BKing Premium: from n/a before 5.4.20.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Kings Plugins B2BKing Premium

Default version status: unaffected

n/a to < 5.4.20affected

References

https://patchstack.com/database/wordpress/plugin/b2bking/vulnerability/wordpress-b2bking-premium-plugin-5-3-80-open-redirection-vulnerability?_s_id=cve ↗