b
b2evolution
Security Risk Profile
75
/100
highSecurity Risk Score
Comprehensive risk assessment based on 31 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 1, 2006 to present
31
Total CVEs
15
Critical+High
0
Exploited
9
Unpatched
Threat Assessment
Avg CVSS
7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
9
Critical/High
Risk Level
75/100
high
📈 1 in Last 30 Days
Severity Distribution
Critical
6High
9Medium
16Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
10
2
SQL Injection
6
3
CSRF
4
4
Path Traversal
2
5
Malicious File Upload
1
Most Affected Products
1. b2evolution b2evolution42
2. b2evolution b2evolution cms4
3. b2evolution Starrating plugin4
4. b2evolution CMS1
Recent Vulnerabilities
See more →CVE-2026-76834
CVSS 9.2critical
b2evolution CMS 6.7.8 through 7.2.5 Object Injection via Negative Integer Array Key
Sep 17, 2026🔧 No Patch
CVE-2021-47800
CVSS 6.9medium
b2evolution 7.2.2 - 'edit account details' Cross-Site Request Forgery (CSRF)
Jan 15, 2026🔧 No Patch
CVE-2022-44036
CVSS 7.2high
Jan 3, 2023🔧 No Patch
CVE-2022-30935
CVSS 9.1critical
Sep 28, 2022
CVE-2021-31632
CVSS 9.8critical
Dec 6, 2021🔧 No Patch
CVE-2021-31631
CVSS 8.8high
Dec 6, 2021🔧 No Patch
CVE-2021-28242
CVSS 8.8high
Apr 15, 2021
CVE-2020-22839
CVSS 6.1medium
Feb 9, 2021🔧 No Patch
CVE-2020-22841
CVSS 4.8medium
Feb 9, 2021🔧 No Patch
CVE-2020-22840
CVSS 6.1medium
Feb 9, 2021🔧 No Patch
Monitor b2evolution in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.