Bludit
- Software type
- Content management system
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/18/2026, Bludit recorded 1 security vulnerability in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Bludit and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-72576Bludit - Stored Cross-Site Scripting via Malicious SVG Logo UploadCVE-2026-46657Bludit's persistent authentication tokens not revoked upon account disablementCVE-2026-46656Bludit CMS has improper authorization and mediation failure leading to persistent ghost sessionsCVE-2026-41456Bludit CMS Reflected XSS via Search PluginCVE-2026-4420Stored XSS via Page Creating functionality in Bludit| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-72576Bludit - Stored Cross-Site Scripting via Malicious SVG Logo Upload | Exploitation statusNot exploited | FixNo |
| SeverityMedium |
CVE-2026-46657Bludit's persistent authentication tokens not revoked upon account disablement | Exploitation statusActively exploited | FixNo | Published06/08/2026 | SeverityHigh |
|---|
CVE-2026-46656Bludit CMS has improper authorization and mediation failure leading to persistent ghost sessions | Exploitation statusActively exploited | FixNo | Published06/08/2026 | SeverityHigh |
|---|
CVE-2026-41456Bludit CMS Reflected XSS via Search Plugin | Exploitation statusActively exploited | FixYes | Published04/21/2026 | SeverityMedium |
|---|
CVE-2026-4420Stored XSS via Page Creating functionality in Bludit | Exploitation statusNot exploited | FixNo | Published04/07/2026 | SeverityMedium |
|---|
CVE-2026-25099Remote Code Execution via Unrestricted File Upload in Bludit | Exploitation statusNot exploited | FixYes | Published03/27/2026 | SeverityHigh |
|---|
CVE-2026-25100Stored XSS via SVG File Upload in Bludit | Exploitation statusNot exploited | FixNo | Published03/27/2026 | SeverityMedium |
|---|
CVE-2026-25101Session Fixation in Bludit | Exploitation statusNot exploited | FixYes | Published03/27/2026 | SeverityMedium |
|---|
CVE-2026-27741Bludit <= 3.16.1 CSRF in Plugin and Theme Management Endpoints | Exploitation statusActively exploited | FixNo | Published02/23/2026 | SeverityMedium |
|---|
CVE-2026-27742Bludit <= 3.16.2 Stored XSS in Post Content | Exploitation statusNot exploited | FixNo | Published02/23/2026 | SeverityMedium |
|---|
46 Results | Page 1 of 5