WordPress security by component

B1.lt

Plugin description

B1.lt is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Jul 18, 2025; the highest CVE/CNA score is 8.8.

Plugin slug: b1-accounting

Latest vulnerability

CVE-2025-6718: B1.lt: SQL injection

B1.lt is affected by SQL injection. Exploitation requires at least subscriber-level access. A successful request can alter database queries and expose or modify WordPress data.

PublishedJul 18, 2025

Safe version guidanceSee mitigation notes

		Safe version
Jul 18, 2025	CVE-2025-6718 B1.lt: SQL injection B1.lt is affected by SQL injection. Exploitation requires at least subscriber-level access. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE8.8 NVDPending
Jul 18, 2025	CVE-2025-6717 B1.lt: SQL injection B1.lt is affected by SQL injection. Exploitation requires at least subscriber-level access. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE6.5 NVDPending