bludit

Security Risk Profile

/100

medium

Security Risk Score

Comprehensive risk assessment based on 48 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from November 6, 2017 to present

Total CVEs

Critical+High

Exploited

Unpatched

Threat Assessment

Avg CVSS

Base severity

Avg EPSS

Exploit probability

Unpatched

Critical/High

Risk Level

56/100

medium

⚠️ 1 Active Exploits🆕 1Fresh (<7d)📈 1 in Last 30 Days

Severity Distribution

Critical

High

Medium

Low

Exploit Likelihood

>50% chance

20-50%

5-20%

<5%

Age Distribution

Common Weaknesses (CWE)

XSS

Malicious File Upload

Path Traversal

Command Injection

CSRF

Most Affected Products

1. Bludit bludit57

2. Bludit Bludit CMS2

3. Bludit Bludit API plugin1

4. bludit1

5. bludit/bludit1

Recent Vulnerabilities

See more →

CVE-2026-72576

CVSS 5.4medium

Bludit - Stored Cross-Site Scripting via Malicious SVG Logo Upload

Bludit's persistent authentication tokens not revoked upon account disablement

6/8/2026🔧 No Patch

CVE-2026-46656

CVSS 8.8high

Bludit CMS has improper authorization and mediation failure leading to persistent ghost sessions

6/8/2026🔧 No Patch

CVE-2026-41456

CVSS 5.1medium

Bludit CMS Reflected XSS via Search Plugin

4/21/2026🔧 No Patch

CVE-2026-4420

CVSS 5.1EPSS 0%medium

Stored XSS via Page Creating functionality in Bludit

4/7/2026🔧 No Patch

CVE-2026-25099

CVSS 8.7high

Remote Code Execution via Unrestricted File Upload in Bludit

3/27/2026⚠ Exploited🔧 No Patch

CVE-2026-25100

CVSS 4.8medium

Stored XSS via SVG File Upload in Bludit

3/27/2026🔧 No Patch

CVE-2026-25101