advisory

2026-10-20

SecurityNews

Security Advisory

High-impact security advisory for Blesta 6.0.0 through 6.0.3. Several security issues are addressed in the 6.0.4 patch release. Apply the patch or upgrade to 6.0.4.

Paul1 min read

2026-09-30

SecurityNews

Security Advisory

High-impact security advisory for Blesta 6.0.0 through 6.0.2. Several security issues are addressed in the 6.0.3 patch release. Apply the patch or upgrade to 6.0.3.

Paul2 min read

2026-06-08

SecurityNews

Security Advisory

Blesta 5.13.9 patches one low-severity security issue with defense-in-depth hardening, plus fixes for partial refunds, OAuth2 callbacks, and email blacklists.

Paul2 min read

2026-05-18

SecurityNews

Security Advisory

High-impact security advisory for Blesta 3.0.0 through 5.13.7 covering authorization, API code execution, email parsing, and CSRF fixes. Upgrade to 5.13.8 or patch.

Paul4 min read

2026-01-28

SecurityNews

Security Advisory

Critical security advisory for Blesta 3.0.0 through 5.13.1: input validation and object injection flaws with possible remote code execution. Upgrade to 5.13.3 or patch.

Paul3 min read

2025-06-09

SecurityNews

Security Advisory

Security advisory: a High-impact path traversal vulnerability affects Blesta 4.0.0 through 5.11.3. Upgrade to 5.11.4 or apply the 5.11.4 or 5.10.4 patch.

Paul2 min read

2024-02-08

SecurityNews

Security Advisory

Critical security advisory for Blesta 5.0.0 through 5.9.1: a path traversal flaw can chain to account compromise and RCE. Patch or upgrade to 5.9.2 now.

Paul3 min read