Spip
D
RISKY
30
Total CVEs
5
Crit / High
1
Medium
0%
Unpatched
69%
Patched
7.9
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB
How we collect data →
CVE Trend by Year
Patch Coverage
✓ 9 patched ✗ 0 unpatched ~ 2 under review ⏳ 2 pending score
Intelligence by Audience
PoC Available
6 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"spip" port:443
org:"Spip" http.status:200
Top EPSS (Exploitation Probability)
Quick Facts for Reporting
Total CVEs tracked
30
Critical severity
2
Actively exploited (CISA)
0
Unpatched ratio
0%
Avg CVSS score
7.9
Security grade
D (RISKY)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-08-03
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-08-03
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
Security News Google News
Recent CVEs
showing 20 of 13
| CVE ID | Severity | Patch | EPSS | Date |
|---|---|---|---|---|
| CVE-2025-71244 | 5.1 MEDIUM | PATCHED / FIX AVAILABLE | 0.19% | 2026-02-19 |
| CVE-2025-71243 PoC | 9.3 CRITICAL | PATCH UNDER REVIEW | 5.24% | 2026-02-19 |
| CVE-2025-71242 | 5.3 MEDIUM | PATCHED / FIX AVAILABLE | 0.26% | 2026-02-19 |
| CVE-2025-71241 | 4.8 MEDIUM | PATCHED / FIX AVAILABLE | 0.19% | 2026-02-19 |
| CVE-2025-71240 | 4.8 MEDIUM | PATCHED / FIX AVAILABLE | 0.18% | 2026-02-19 |
| CVE-2023-53900 | 4.8 MEDIUM | PATCH UNDER REVIEW | 0.32% | 2025-12-16 |
| CVE-2024-53619 PoC | ? N/A | UNKNOWN / UNPATCHED | 0.06% | 2024-11-26 |
| CVE-2024-53620 PoC | ? N/A | UNKNOWN / UNPATCHED | 0.14% | 2024-11-26 |
| CVE-2024-8517 PoC | 9.8 CRITICAL | PATCHED / FIX AVAILABLE | 94.61% | 2024-09-06 |
| CVE-2024-7954 PoC | 9.8 CRITICAL | PATCHED / FIX AVAILABLE | 90.05% | 2024-08-23 |
| CVE-2024-23659 | ? N/A | PATCHED / FIX AVAILABLE | 0.45% | 2024-01-19 |
| CVE-2023-52322 | ? N/A | PATCHED / FIX AVAILABLE | 0.44% | 2024-01-04 |
| CVE-2023-27372 PoC | ? N/A | PATCHED / FIX AVAILABLE | 99.68% | 2023-02-28 |
Intel
Founded2001
Trust ScoreD — RISKY
Max CVSS9.8
Last Updated2026-08-03
Top Weaknesses
CWE-79
Cross-Site Scripting (XSS)
11 occurrences in Spip CVEs
(37% of total)
CWE-94
Code Injection
5 occurrences in Spip CVEs
(17% of total)
CWE-89
SQL Injection
3 occurrences in Spip CVEs
(10% of total)
CWE-601
Open Redirect
2 occurrences in Spip CVEs
(7% of total)
CWE-502
Deserialization of Untrusted Data
2 occurrences in Spip CVEs
(7% of total)
CWE-862
Unknown Weakness Type
1 occurrence in Spip CVEs
(3% of total)
CWE-434
Unrestricted File Upload
1 occurrence in Spip CVEs
(3% of total)
CWE-305
Unknown Weakness Type
1 occurrence in Spip CVEs
(3% of total)
Company Profile
SPIP is an open-source content management system (CMS) designed for publishing websites, particularly popular in French-speaking communities. It is known for its focus on simplicity and multilingual support, but has a history of security vulnerabilities, including SQL injection and cross-site scripting flaws, making it a target for attackers. Its cybersecurity relevance stems from the need for administrators to apply patches promptly to mitigate risks.
Response Metrics
Est. MTTR ⓘ
~48 days
(Good)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↗ +2100% worse
CVE count 2026 vs 2025:
1 → 22 CVEs
Patch Speed ⓘ Poor (>65% open)
0% of CVEs still unpatched.
Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
Financial Risk Estimate
Est. GDPR Low
€600K
Est. GDPR High
€6.0M
Based on 2 critical CVEs, 0 CISA KEV, 97% unpatched. Model: GDPR Art.83 · not legal advice.
Actions
Embed Badge
Spip D valtersit.com