Thirty Bees vulnerabilities
We track 1 vulnerability in Thirty Bees products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 12, 2026.
1vulnerabilities
0critical
1high
0exploited
7.4average CVSS score
Latest Thirty Bees vulnerabilities
- 7.4 High severity
thirty bees: Authorization Bypass Through User-Controlled Key
Thirty bees through 1.7.0 contains an authentication bypass vulnerability in PasswordController::resolveCustomer() that allows unauthenticated attackers to reset registered customers' passwords using guest account tokens. Attackers can place a guest order with