B1accounting Site.pro For Woocommerce
2 CVEs affecting B1accounting Site.pro For Woocommerce. Latest disclosed: 2025-07-18. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-6718 | High | 8.8 | 2025-07-18 | The B1.lt plugin for WordPress is vulnerable to SQL Injection due to a missing capability check on the b1_run_query AJAX action in all versions up to, and incl… |
CVE-2025-6717 | Medium | 6.5 | 2025-07-18 | The B1.lt plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 2.2.56 due to insufficient escaping… |