Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.5
CVE-2025-1280: BM Content Builder lets logged-in users read any server file
CVE-2025-1280 · published 1 month ago
Summary
The BM Content Builder add‑on for WordPress lets anyone with a basic account view files stored on the web server. This could expose private data such as passwords or configuration details. Update the plugin to version 3.17.1 or later, or remove it if not needed, to stop the risk.
What to do
- Update seatheme bm content builder to version 3.17.1 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| seatheme | bm content builder | < 3.17.1 |
Original advisory text
BM Content Builder < 3.17.1 - Authenticated (Subscriber+) Arbitrary File Read
The BM Content Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to 3.17.1 (exclusive) via the ux_cb_page_customize_save_layout_ajax() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-22Path Traversal
Timeline
Published22 Sep 2026
Updated4 Nov 2026
First seen22 Sep 2026
Track software like this
Free during beta