Skip to content
OpenAdvisories

Vendor

thirty bees

1 known vulnerabilities.

Products

thirty bees 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2026-109394

    Thirty bees through 1.7.0 Account Takeover via PasswordController Guest Checkout

    Thirty bees through 1.7.0 contains an authentication bypass vulnerability in PasswordController::resolveCustomer() that allows unauthenticated attackers to reset registered customers' passwords using guest account tokens. Attackers can place a guest order wit…

    thirty bees thirty bees