Medium · 5.9 CVE-2026-56009 EUVD-2026-37873GHSA-m7fg-j95w-crhw

WordPress Bricksable for Bricks Builder plugin <= 1.6.83 - Cross Site Scripting (XSS) vulnerability

Published Jun 18, 2026 · Updated Jun 18, 2026 · Assigned by Patchstack

Vendor: Bricksable Product: Bricksable for Bricks Builder

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bricksable for Bricks Builder allows Stored XSS.

This issue affects Bricksable for Bricks Builder: from n/a through 1.6.83.

Affected products

Vendor	Product	Affected	Fixed
Bricksable	Bricksable for Bricks Builder	≤ 1.6.83	—

References

https://patchstack.com/database/wordpress/plugin/bricksable/vulnerability/wordpress-bricksable-for-bricks-builder-plugin-1-6-83-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry