Blog on | Blesta

Security Advisory

Mon, 08 Jun 2026 10:00:00 -0700

Blesta 5.13.9 is a maintenance release made up primarily of routine bug fixes. It also addresses one reported low-severity security issue and includes some additional defense-in-depth hardening. A patch is being released for the 5.13 branch.

The functional fixes cover partial refund status handling, a Support Manager OAuth2 callback issue, a default avatar path regression, the display of the ACH payment option in the order flow, and email blacklist wildcard matching. We give this an overall impact rating of Low. We recommend applying the 5.13.9 patch, or upgrading to version 5.13.9.

Blesta 6.0 Beta Released

Thu, 21 May 2026 09:00:00 -0700

With much anticipation, we are pleased to announce that Blesta 6.0.0 BETA 1 has been released!

Security Advisory

Mon, 18 May 2026 10:00:00 -0700

Several security issues affecting Blesta versions 3.0.0 through 5.13.7 have been identified. Patches are being released for the 5.12 and 5.13 branches.

These include an authorization issue, a low-severity enumeration issue on a public endpoint (no customer or account data is exposed), an inbound email header parsing issue in the Support Manager, two issues that could allow code execution by a caller already holding valid API credentials, a password-reset flow issue that could weaken account protections under specific conditions, and additional hardening to CSRF token verification and the Uploads component. Individual issues range in severity, but we give this an overall impact rating of High based on the most severe issue. We recommend applying the appropriate patch for your release, or upgrading to version 5.13.8 as soon as possible.

Blesta 6 Preview: Part 2

Mon, 04 May 2026 00:00:00 +0000

In our last preview we walked through the new admin experience in Blesta 6. This time we’re focusing on two more major updates — AI features built right into the platform, and a much better Support Manager. This is the first time we’re talking about AI in Blesta publicly, but there’s more we haven’t covered here. AI: Content Generation In Blesta 6, you can generate content right where you need it.

Blesta 5.13.7 Patch Released

Mon, 27 Apr 2026 10:00:00 -0700

We are pleased to announce the release of Blesta 5.13.7, which addresses bugs discovered in the 5.13 branch.

Blesta 6 Preview: Part 1

Thu, 16 Apr 2026 00:00:00 +0000

In December we gave you a first look at the new Blesta 6 admin UI. That video was a design preview. This one is the real thing. Blesta 6 isn’t just a facelift. The entire admin panel has been re-imagined with a new framework, new layout, and new workflows. This is our biggest update since version 3, by far — tens of thousands of lines of code. Dashboard The dashboard will feel familiar, but the design is a big step forward.

Blesta 5.13.6 Patch Released

Mon, 23 Mar 2026 10:00:00 -0700

We are pleased to announce the release of Blesta 5.13.6, which addresses bugs discovered in the 5.13 branch.

Blesta 5.13.5 Patch Released

Thu, 26 Feb 2026 10:00:00 -0700

We are pleased to announce the release of Blesta 5.13.5, which addresses bugs discovered in the 5.13 branch.

Blesta 5.13.4 Patch Released

Mon, 09 Feb 2026 10:00:00 -0700

We are pleased to announce the release of Blesta 5.13.4, which addresses bugs discovered in the 5.13 branch.

Blesta 5.13.3 Patch Released

Sat, 31 Jan 2026 10:00:00 -0700

We are pleased to announce the released of Blesta 5.13.3, which addresses bugs discovered in the 5.13 branch.

Security Advisory

Wed, 28 Jan 2026 10:00:00 -0700

Several security issues affecting Blesta versions 3.0.0 through 5.13.1 have been identified.

An input validation vulnerability (CORE-5665) and object injection vulnerabilities (CORE-5668, CORE-5680) have been discovered. One of these vulnerabilities could potentially allow remote code execution under certain conditions. We recommend applying the appropriate patch for your release, or upgrading to version 5.13.3 as soon as possible. We give this an impact rating of Critical.

Blesta 5.13.1 Patch Released

Wed, 14 Jan 2026 10:00:00 -0700

We are pleased to announce the released of Blesta 5.13.1, which addresses bugs discovered in the 5.13 branch.

Blesta 5.13 Released

Tue, 06 Jan 2026 14:10:28 -0700

Blesta 5.13 is now available!

This version brings powerful new features and improvements! Clients and staff can now upload profile pictures, and support tickets can be rated by clients. We’ve added step-up authentication for enhanced security, and invoices can now be generated in the digital format UBL XML. Domain management gets better with bulk name server updates and improved date syncing. The Import Manager has been enhanced to support non-owner user relationships from WHMCS. You can now requeue invoices for delivery after payment, clients can add additional recipients to tickets, contact log history is now visible on client profile pages, and much more!

Blesta 6: A Paradigm Shift

Thu, 11 Dec 2025 00:00:00 +0000

We have been hard at work on the next major version update for Blesta, watch the video for a sneak peek. Sound on + full-screen. This changes everything Paradigm: The all-new Blesta 6 Admin UI. Built in house from the ground up on Bootstrap 5, it has a sleek, responsive, modern interface that adapts to your preferences. Dark mode. Light mode. Streamlined power in every touch, it’s a brand new vibe.

Blesta 5.13 Beta Released

Tue, 25 Nov 2025 13:47:18 -0700

We are pleased to announce that Blesta 5.13.0 BETA 1 has been released!