Bludit vulnerabilities

CVEs per yearBy the year they were published

1. 20245
2. 20251
3. 202613

Newest CVEs

• CVE-2026-93366

  Bludit CMS 3.22.0 Authorization Bypass via list-images/delete-image AJAX Endpoints

  Bludit · Bludit CMS

  Medium5.3
• CVE-2026-93365

  Bludit CMS 3.22.0 Missing Authorization via content-get-list AJAX Endpoint

  Bludit · Bludit CMS

  High7.1
• CVE-2026-93364

  Bludit CMS 3.22.0 Mass Assignment Privilege Escalation via Pages::edit()

  Bludit · Bludit CMS

  Medium5.3
• CVE-2026-72576

  Bludit - Stored Cross-Site Scripting via Malicious SVG Logo Upload

  Bludit · Bludit

  Medium5.4
• CVE-2026-46657

  Bludit's persistent authentication tokens not revoked upon account disablement

  bludit · bludit

  High7.1
• CVE-2026-46656

  Bludit CMS has improper authorization and mediation failure leading to persistent ghost sessions

  bludit · bludit

  High8.8
• CVE-2026-41456

  Bludit CMS Reflected XSS via Search Plugin

  bludit · bludit

  Medium5.1
• CVE-2026-4420

  Stored XSS via Page Creating functionality in Bludit

  Bludit · Bludit

  Medium5.1
• CVE-2026-25099

  Remote Code Execution via Unrestricted File Upload in Bludit

  Bludit · Bludit

  High8.7
• CVE-2026-25100

  Stored XSS via SVG File Upload in Bludit

  Bludit · Bludit

  Medium4.8