Technology newsroom
🚨 Urgent Alert! Critical 10.0 Vulnerability in WordPress Bricksforge Plugin Actively Exploited
A critical severity (CVSS 10.0) vulnerability has been found in the WordPress Bricksforge plugin, which hackers are actively exploiting for Remote Code Execution (RCE) to take over websites. Administrators should update immediately.
📌 Key Takeaways:
- A critical CVSS 10.0 vulnerability (CVE-2026-85097) has been found in the WordPress Bricksforge plugin.
- Attackers can remotely upload and execute malicious code (Remote Code Execution) without authentication.
- The vulnerability is actively exploited. System administrators should update to the latest version as soon as possible.
Patchstack, a website security company, has issued an alert regarding the discovery of a critical security vulnerability in the popular WordPress plugin Bricksforge. Of greater concern is the evidence that hackers are continuously exploiting this vulnerability to attack various websites.
The vulnerability is identified as CVE-2026-85097 and has been assigned the highest severity score of CVSS 10.0 out of 10.0, indicating an extremely dangerous flaw. This weakness allows attackers, without requiring any account or authentication, to upload malicious PHP files to the servers of websites running older plugin versions.
💻 Impact of the Attack
Once hackers successfully upload files, they can execute remote code (Remote Code Execution - RCE) at will, which means gaining complete control over the website. This can involve stealing sensitive data, embedding malware, destroying data, or using the website as a base for further attacks on other targets. This poses a serious threat to website owners and users.
🚨 Urgent Recommendations
As this vulnerability has been confirmed to be actively exploited (Exploited in the wild), all WordPress website administrators who have the Bricksforge plugin installed should promptly check their plugin version and update immediately to the latest patched version to close this attack vector and protect your website.
💬 Who uses the Bricksforge plugin? Please check and update immediately!