muffin group
Security Risk Profile
42
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 5 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 19, 2024 to present
5
Total CVEs
2
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
7.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
42/100
medium
Severity Distribution
Critical
0High
2Medium
3Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
XSS
2
2
Malicious File Upload
1
3
Path Traversal
1
Most Affected Products
1. Muffin Group Betheme5
2. Muffingroup Betheme Wordpress2
3. WordPress Betheme1
Recent Vulnerabilities
See more →CVE-2026-6261
CVSS 8.8EPSS 0%high
Betheme <= 28.4 - Authenticated (Author+) Arbitrary File Upload to Remote Code Execution via Icon Pack Upload
5/5/2026🔧 No Patch
CVE-2026-6262
CVSS 6.5EPSS 0%medium
Betheme <= 28.4 - Authenticated (Contributor+) Arbitrary File Deletion via 'mfn-icon-upload'
5/5/2026🔧 No Patch
CVE-2025-63075
CVSS 6.5medium
WordPress Betheme theme <= 28.2 - Cross Site Scripting (XSS) vulnerability
12/9/2025🔧 No Patch
CVE-2025-3077
CVSS 6.4medium
Betheme <= 28.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
4/16/2025🔧 No Patch
CVE-2023-47770
CVSS 7.6high
WordPress BeTheme theme <= 27.1.1 - Contributor+ Broken Access Control vulnerability
6/19/2024
Monitor muffin group in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.