CVE-2026-66598
WordPress B2BKing Premium plugin <= 5.6.07 - Cross Site Scripting (XSS) vulnerabilityUnauthenticated Cross Site Scripting (XSS) in B2BKing Premium <= 5.6.07 versions.
We have discovered 1,205 live websites that are affected by CVE-2026-66598.
Common Weakness Enumeration
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Details
- Published - Aug 20, 2026
- Updated - Aug 20, 2026
Credits
- dutafi | Patchstack Bug Bounty Program (finder)
CVE References
CWE References
CWE
Website Distribution by Country
Number of websites using CVE-2026-66598 United States | 275 websites |
 Germany | 103 websites |
 Greece | 73 websites |
 Netherlands | 68 websites |
 GB | 55 websites |
 Italy | 52 websites |
 Poland | 46 websites |
 France | 45 websites |
 Sweden | 42 websites |
 Denmark | 33 websites |
Website Distribution by TLD
Number of websites using CVE-2026-66598| .com | 457 websites |
| .nl | 50 websites |
| .co.uk | 42 websites |
| .de | 42 websites |
| .pl | 37 websites |
| .it | 36 websites |
| .se | 31 websites |
| .com.au | 24 websites |
| .dk | 23 websites |
| .fr | 20 websites |
Vulnerable Versions
Vulnerable versions are highlighted in redWebsites affected by CVE-2026-66598
Top websites that are affected by CVE-2026-66598. Please click on the "Contact us" link to get more information.| Domain | Country | Rank | Contacts |
|---|---|---|---|
| *************.fr | United States | ***,*** | |
| *********.ca |  Canada | ***,*** | |
| ************.com |  Turkey | ***,*** | |
| ********.com | Germany | ***,*** | |
| ******************.com | United States | ***,*** | |
| *****************.com | United States | ***,*** | |
| ******.**.il | United States | ***,*** | |
| ****************.com | United States | ***,*** | |
| **********.com | United States | ***,*** | |
| *********.de | Germany | *,***,*** |