advisory

2026-06-08

SecurityNews

Security Advisory

Blesta 5.13.9 patches one low-severity security issue with defense-in-depth hardening, plus fixes for partial refunds, OAuth2 callbacks, and email blacklists.

Paul2 min read

2026-05-18

SecurityNews

Security Advisory

High-impact security advisory for Blesta 3.0.0 through 5.13.7 covering authorization, API code execution, email parsing, and CSRF fixes. Upgrade to 5.13.8 or patch.

Paul4 min read

2026-01-28

SecurityNews

Security Advisory

Critical security advisory for Blesta 3.0.0 through 5.13.1: input validation and object injection flaws with possible remote code execution. Upgrade to 5.13.3 or patch.

Paul3 min read

2025-06-09

SecurityNews

Security Advisory

Security advisory: a High-impact path traversal vulnerability affects Blesta 4.0.0 through 5.11.3. Upgrade to 5.11.4 or apply the 5.11.4 or 5.10.4 patch.

Paul2 min read

2024-02-08

SecurityNews

Security Advisory

Critical security advisory for Blesta 5.0.0 through 5.9.1: a path traversal flaw can chain to account compromise and RCE. Patch or upgrade to 5.9.2 now.

Paul3 min read