CVE-2016-8901: b2evolution

Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days.

b2evolution 6.7.6 suffer from an Object Injection vulnerability in /htsrv/call_plugin.php.

Affected products

• b2evolution b2evolution: version 6.7.6 only

Published 2019-05-23. Last modified 2026-06-17.