Unfixed vulnerabilities in BM Builder and Art Theme

[Dthandz]

Hi, there are 2 known vulnerabilities in the theme:

BM Content Builder < 3.16.3 – Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/bm-builder/bm-content-builder-31621-missing-authorization-to-authenticated-subscriber-stored-cross-site-scripting-via-ux-cb-page-options-save

Art Theme < 3.12.3 – Missing Authorization to Authenticated (Subscriber+) Theme Option Delete
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-themes/art-theme/art-theme-31223-missing-authorization-to-authenticated-subscriber-theme-option-delete

My website was hacked because of this 2 days ago: when will you give us a fixed theme?

Thanks, Thandz

[SeaTheme]

Hi

Thanks for the report.
I am very sorry for the inconvenience caused to you.
We have fix the issue from Art Theme v3.12.3. Please upgrade to the latest version(both ART theme and BM builder plugin, the latest version can be obtained on the Themeforest Download page https://themeforest.net/downloads )

Check how to update: https://doc.seatheme.net/theme/art/install-art/art-theme-update/#manual-update

---

Regards!
SeaTheme – FAQs – WordPress Customization – Facebook

[Author]

Posts