PT-2026-23672 · Kings Plugins · B2Bking Premium

Published 2026-03-06 · Updated 2026-03-09 · CVE-2026-28106

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Kings Plugins B2BKing Premium versions through 5.3.80

Description An issue exists in Kings Plugins B2BKing Premium that allows for URL redirection to an untrusted site, potentially enabling phishing attacks. The issue is an 'Open Redirect' which could be used maliciously.

Recommendations Update Kings Plugins B2BKing Premium to a version later than 5.3.80.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2026-28106

Affected Products

B2Bking Premium

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-28106 · Security Note
• https://t.me/cveNotify/154494 · Telegram Post
• https://patchstack.com/database/wordpress/plugin/b2bking/vulnerability/wordpress-b2bking-premium-plugin-5-3-80-open-redirection-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2029975535322042724 · Twitter Post
• https://t.me/cveNotify/154749 · Telegram Post
• https://t.me/CVEtracker/46589 · Telegram Post