Skip to content
OpenAdvisories

Vendor

Bricksforge

7 known vulnerabilities.

Products

Bricksforge 7
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-85097 Public exploit

    Bricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter

    The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions up to, and including, 3.1.8.9. This is due to insufficient validation of the attacker-controlled URL field in the 'temporaryFileUploads' parameter during f…

    Bricksforge Bricksforge Web / CMS
  • Critical 9.8
    CVE-2026-84814

    WordPress Bricksforge plugin <= 3.1.8.8 - Privilege Escalation vulnerability

    Subscriber Privilege Escalation in Bricksforge <= 3.1.8.8 versions.

    Bricksforge Bricksforge
  • Critical 9.8
    CVE-2026-14956

    Bricksforge <= 3.1.8.6 - Unauthenticated Privilege Escalation via Pro Forms fieldIds Parameter

    The Bricksforge plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.1.8.6. This is due to improper validation of the fieldIds parameter in the Pro Forms registration action, which allows attacker-supplied field I…

    Bricksforge Bricksforge Web / CMS
  • Critical 9.8
    CVE-2024-31244

    WordPress Bricksforge plugin <= 2.0.17 - Unauthenticated Arbitrary WordPress Settings Change vulnerability

    Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17.

    Bricksforge Bricksforge