News

2026-06-08

SecurityNews

Security Advisory

Blesta 5.13.9 patches one low-severity security issue with defense-in-depth hardening, plus fixes for partial refunds, OAuth2 callbacks, and email blacklists.

Paul2 min read

2026-05-18

SecurityNews

Security Advisory

High-impact security advisory for Blesta 3.0.0 through 5.13.7 covering authorization, API code execution, email parsing, and CSRF fixes. Upgrade to 5.13.8 or patch.

Paul4 min read

2026-04-27

5.13.7

Patch released

1 min

2026-03-23

5.13.6

Patch released

1 min

2026-02-26

5.13.5

Patch released

1 min

2026-02-09

5.13.4

Patch released

1 min

2026-01-31

5.13.3

Patch released

1 min

2026-01-28

SecurityNews

Security Advisory

Critical security advisory for Blesta 3.0.0 through 5.13.1: input validation and object injection flaws with possible remote code execution. Upgrade to 5.13.3 or patch.

Paul3 min read