Skip to content
OpenAdvisories

Vendor

bludit

19 known vulnerabilities.

Products

bludit 15 Bludit CMS 3 Backup Plugin 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-25099 Public exploit

    Remote Code Execution via Unrestricted File Upload in Bludit

    Bludit’s API plugin allows an authenticated attacker with a valid API token to upload files of any type and extension without restriction, which can then be executed, leading to Remote Code Execution. This issue was fixed in 3.18.4.

    bludit bludit