https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T12:06:22.722267+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-373412 EUVD-2026-373412 2026-10-06T12:06:22.807329+00:00 EUVD-2026-373412 https://cve.radiocsirt.org/vuln/fkie_cve-2025-1280 fkie_cve-2025-1280 2026-10-06T12:06:22.807379+00:00

The BM Content Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to 3.17.1 (exclusive) via the ux_cb_page_customize_save_layout_ajax() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.

 https://cve.radiocsirt.org/vuln/ghsa-97h8-3g49-xmvg GHSA-97h8-3g49-xmvg 2026-10-06T12:06:22.807415+00:00

The BM Content Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to 3.17.1 (exclusive) via the ux_cb_page_customize_save_layout_ajax() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.