B2Evolution

Products

ProductCVEsExploitedLatest
b2evolution1–Jan 15, 2026
b2evolution CMS1–Sep 17, 2026

Exploited and recent CVEs

  • CVE-2026-76834 High 8.1 b2evolution CMS 6.7.8 through 7.2.5 Object Injection via Negative Integer Array Key 0.8%
  • CVE-2021-47800 Medium 5.3 b2evolution 7.2.2 - 'edit account details' Cross-Site Request Forgery (CSRF) 0.2%