Vulnerability · Published Sep 19, 2026 · Assigned by WPScan
CVE-2026-16557Nimble Builder <= 3.3.8 - Subscriber+ Non-Public Content Disclosure via sek_get_nimble_content_for_seo_plugins
Medium 4.3
In plain English
A medium-severity information exposure in Nimble Page Builder from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities).
Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.3%top 77.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The Nimble Page Builder WordPress plugin through 3.3.8 does not perform an authorization check when returning page-builder content through an authenticated AJAX action, allowing any authenticated user (Subscriber+) to disclose the page-builder content of arbitrary non-public (draft, pending, private, scheduled) posts and pages.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | Nimble Page Builder | 0 – through 3.3.8 |
Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
References
- https://wpscan.com/vulnerability/a47221d4-bd82-4813-a2de-423fbe014ea0/ exploit, vdb-entry, technical-description