Skip to content
OpenAdvisories

Vendor

Bricks Builder

7 known vulnerabilities.

Products

Bricks 7
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.4
    CVE-2023-3410

    Bricks <= 1.10.1 - Authenticated (Bricks Page Builder Access+) Stored Cross-Site Scripting

    The Bricks theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘customTag' attribute in versions up to, and including, 1.10.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, …

    Bricks Builder Bricks Web / CMS
  • Medium 4.3
    CVE-2023-3408

    Bricks <= 1.8.1 - Cross-Site Request Forgery via save_settings

    The Bricks theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.1. This is due to missing or incorrect nonce validation on the 'save_settings' function. This makes it possible for unauthenticated attackers to m…

    Bricks Builder Bricks Web / CMS
  • Medium 5.4
    CVE-2023-3409

    Bricks <= 1.8.1 - Cross-Site Request Forgery via reset_settings

    The Bricks theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.1. This is due to missing or incorrect nonce validation on the 'reset_settings' function. This makes it possible for unauthenticated attackers to …

    Bricks Builder Bricks Web / CMS
  • Medium 6.5
    CVE-2022-3400

    The Bricks theme for WordPress is vulnerable to authorization bypass due to a missing capability check on the bricks_sa…

    Bricks Builder Bricks Web / CMS