Critical Bricksforge WordPress Plugin Flaw Exploited in the Wild
Summary
Attackers are exploiting CVE-2026-85097, a critical unauthenticated file-upload and code-execution flaw in the Bricksforge WordPress plugin. Versions 3.1.8.9 and earlier are affected; version 3.1.8.10 patches the issue.
Key points
- CVE-2026-85097 has a CVSS score of 9.8.
- Unauthenticated attackers can upload arbitrary files and execute malicious code, potentially taking control of affected WordPress sites.
- Bricksforge versions 3.1.8.9 and earlier are affected; version 3.1.8.10 contains the patch.
- Patchstack observed exploitation attempts beginning October 7.
- Patchstack telemetry showed two clusters of automated activity, but did not attribute them to a specific threat actor.
Article Details
- Vulnerability Types
- Unauthenticated arbitrary file upload
- Unauthenticated code execution
- Severity
- Critical (CVSS 9.8)
- Affected Versions
- 3.1.8.9 and earlier
- Exploitation Status
- active
- Exploit Availability
- unknown
- Patch Status
- available
MITRE ATT&CK
CVE
Products
BricksBricksforge is a commercial add-on for the Bricks visual site builder that layers extra tools onto WordPress sites, such as custom forms, animations, an email designer, and admin-area pages. Patchstack reported thatBricksforgeA critical vulnerability in the Bricksforge WordPress plugin is being exploited in the wild, according to WordPress security company Patchstack.WordPressA critical vulnerability in the Bricksforge WordPress plugin is being exploited in the wild, according to WordPress security company Patchstack.