Security Advisory
Critical security advisory for Blesta 3.0.0 through 5.13.1: input validation and object injection flaws with possible remote code execution. Upgrade to 5.13.3 or patch.
Blog · publishing since 2008
Release announcements, version previews, security advisories, and the occasional detour — written by the team building Blesta.
Critical security advisory for Blesta 3.0.0 through 5.13.1: input validation and object injection flaws with possible remote code execution. Upgrade to 5.13.3 or patch.
Blesta 5.13 is now available with profile pictures, ticket ratings, step-up authentication, UBL XML invoices, domain management improvements, and more.
Sneak peek at the all-new Blesta 6 Admin UI. Built from the ground up on Bootstrap 5 with dark mode, three-tier architecture, and a sleek responsive interface. Coming early 2026.
Blesta 5.13 Beta 1 is now available featuring profile pictures, ticket ratings, step-up authentication, UBL XML invoices, and domain management improvements.
Blesta license prices are adjusting for the first time since 2013, effective 2026. See new monthly, owned, and Support and Updates rates and the transition dates.
30-day free trial · No credit card · Your server
Everything on this blog ships in the box. Full product, free for 30 days, on your own server.