Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

vulnerability

Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

A critical vulnerability (CVE-2026-85097, CVSS 10.0) in the Bricksforge WordPress plugin is being actively exploited in the wild, allowing unauthenticated attackers to execute arbitrary PHP code on vulnerable websites. T…

The Hacker News · 1d ago CriticalCVSS 9.8ExploitedEPSS 87%

CVE-2026-85097 CVE-2026-93836 CVE-2026-94504 AU BR CH wordpress vulnerability rce

vulnerability

Bricksforge WordPress Plugin Vulnerability Exploited in the Wild

A critical vulnerability in the Bricksforge WordPress plugin is currently being exploited in the wild. The vulnerability was addressed with version 3.1.8.10, but older versions are still at risk.

SecurityWeek · 1d ago CriticalCVSS 9.8Exploited

CVE-2026-85097 wordpress vulnerability plugin

news.mlab.sh

Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

Bricksforge WordPress Plugin Vulnerability Exploited in the Wild