b
b2evolution
Security Risk Profile
41
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 30 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 1, 2006 to present
30
Total CVEs
14
Critical+High
0
Exploited
8
Unpatched
Threat Assessment
Avg CVSS
7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
8
Critical/High
Risk Level
41/100
medium
Severity Distribution
Critical
5High
9Medium
16Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
10
2
SQL Injection
6
3
CSRF
4
4
Path Traversal
2
5
Malicious File Upload
1
Most Affected Products
1. b2evolution b2evolution42
2. b2evolution b2evolution cms4
3. b2evolution Starrating plugin4
Recent Vulnerabilities
See more →CVE-2021-47800
CVSS 6.9medium
b2evolution 7.2.2 - 'edit account details' Cross-Site Request Forgery (CSRF)
Jan 15, 2026🔧 No Patch
CVE-2022-44036
CVSS 7.2high
Jan 3, 2023🔧 No Patch
CVE-2022-30935
CVSS 9.1critical
Sep 28, 2022
CVE-2021-31632
CVSS 9.8critical
Dec 6, 2021🔧 No Patch
CVE-2021-31631
CVSS 8.8high
Dec 6, 2021🔧 No Patch
CVE-2021-28242
CVSS 8.8high
Apr 15, 2021
CVE-2020-22839
CVSS 6.1medium
Feb 9, 2021🔧 No Patch
CVE-2020-22841
CVSS 4.8medium
Feb 9, 2021🔧 No Patch
CVE-2020-22840
CVSS 6.1medium
Feb 9, 2021🔧 No Patch
CVE-2016-8901
CVSS 9.8critical
May 23, 2019
Monitor b2evolution in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.