bludit Backup Plugin vulnerabilities

Latest bludit Backup Plugin CVEs

Newest publication first

1. CVE-2023-53907 Bludit < 3.13.0 Authenticated Arbitrary File Download via Backup Plugin

   Published 2025-12-17

   High·CVSS 7.1 EPSS 0.81%

   Bludit versions before 3.13.0 contain an authenticated file download vulnerability in the Backup Plugin that allows logged-in users to access arbitrary files. Attackers can exploit the plugin's download functionality by manipulating file path parameters to read sensitive system f...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.