Skip to content
OpenAdvisories

Vendor

Bricks Builder

7 known vulnerabilities.

Products

Bricks 7
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2025-6495

    Bricks Builder <= 1.12.4 - Unauthenticated SQL Injection via `p` Parameter

    The Bricks theme for WordPress is vulnerable to blind SQL Injection via the ‘p’ parameter in all versions up to, and including, 1.12.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th…

    Bricks Builder Bricks Web / CMS
  • High 7.1
    CVE-2024-2297

    Bricksbuilder <= 1.9.6.1 - Authenticated (Contributor+) Privilege Escalation via create_autosave

    The Bricks theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.6.1. This is due to insufficient validation checks placed on the create_autosave AJAX function. This makes it possible for authenticated attackers, …

    Bricks Builder Bricks Web / CMS
  • High 8.8
    CVE-2022-3401

    The Bricks theme for WordPress is vulnerable to remote code execution due to the theme allowing site editors to include…

    Bricks Builder Bricks Web / CMS