PT-2026-96655 · WordPress · Bm Content Builder
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
BM Content Builder versions prior to 3.17.1
Description
Insufficient file path validation in the
ux cb remove layout ajax() and ux cb tools export ajax() functions allows authenticated attackers with Subscriber-level access and above to delete arbitrary files on the server. Deleting critical files, such as wp-config.php, can lead to remote code execution.Recommendations
Update BM Content Builder to version 3.17.1 or later.
Fix
RCE
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Bm Content Builder