CVE-2020-23765: Bludit

High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days.

A file upload vulnerability was discovered in the file path /bl-plugins/backup/plugin.php on Bludit version 3.12.0. If an attacker is able to gain Administrator rights they will be able to use unsafe plugins to upload a backup file and control the server.

Affected products

• Bludit Bludit: version 3.12.0 only

Published 2021-05-21. Last modified 2026-06-17.