Path Traversal Vulnerability in SeaTheme's BM Content Builder Plugin
CVE-2025-59002

7.7HIGH

Key Information:

Vendor

WordPress
Status
Bm Content Builder
Vendor
CVE Published:
26 September 2025

What is CVE-2025-59002?

The Path Traversal vulnerability present in SeaTheme's BM Content Builder allows unauthorized access to restricted directories. This flaw could enable attackers to traverse directories and access sensitive files on the web server. Proper implementation of path validation is essential to mitigate this risk and safeguard user data.

Affected Version(s)

BM Content Builder < 3.16.3.3

References

https://patchstack.com/database/wordpress/plugin/bm-build...
vdb-entry

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Bonds (Patchstack Alliance)
JSON
.