Advisories · Technology
SeaTheme BM Content Builder.
Every CVE that names SeaTheme BM Content Builder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
BM Content Builder < 3.17.1 - Authenticated (Subscriber+) Arbitrary File Read
- SeaTheme BM Content Builder
- Path traversal
- CVSS 8.8 High
BM Content Builder < 3.17.1 - Authenticated (Subscriber+) Arbitrary File Deletion
- SeaTheme BM Content Builder
- Path traversal
- CVSS 6.5 Medium
WordPress BM Content Builder plugin < 3.16.3.3 - Arbitrary File Download vulnerability
- SeaTheme BM Content Builder
- Path traversal
- CVSS 7.7 High
WordPress BM Content Builder Plugin < 3.16.3.3 - Arbitrary File Deletion Vulnerability
- SeaTheme BM Content Builder
- Path traversal
- CVSS 6.4 Medium
BM Content Builder <= 3.16.2.1 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via ux_cb_page_options_save
- SeaTheme BM Content Builder
- Broken access control
- CVSS 8.8 High
BM Content Builder <= 3.16.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
- SeaTheme BM Content Builder
- Broken access control