en
Bludit is a free, open-source project and maintainer of a lightweight flat-file content management system for websites and blogs. Its core business or mission is simple web publishing through PHP and JSON-based storage, supported by a global open-source community and public project resources.
As of 10/18/2026, Bludit recorded 4 security vulnerabilities in the last 90 days across 2 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Bludit CMS had the most security vulnerabilities in the Bludit ecosystem, with 3 vulnerabilities—approximately 75% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-93366Bludit CMS 3.22.0 Authorization Bypass via list-images/delete-image AJAX EndpointsCVE-2026-93365Bludit CMS 3.22.0 Missing Authorization via content-get-list AJAX EndpointCVE-2026-93364Bludit CMS 3.22.0 Mass Assignment Privilege Escalation via Pages::edit()CVE-2026-72576Bludit - Stored Cross-Site Scripting via Malicious SVG Logo UploadCVE-2026-46657Bludit's persistent authentication tokens not revoked upon account disablement49 Results | Page 1 of 5
| SeverityHigh |
| SeverityMedium |
| SeverityMedium |
| SeverityHigh |
| SeverityHigh |
| SeverityMedium |
| SeverityMedium |
| SeverityHigh |