Bricksforge WordPress Plugin security flaw Exploited in real attacks

What happened

The post Bricksforge WordPress (content management system) Plugin Vulnerability Exploited in the Wild appeared first on SecurityWeek . Vulnerabilities Bricksforge WordPress Plugin Vulnerability Exploited in the Wild The vulnerability tracked as CVE-2026-85097 (the public catalogue number for a specific software flaw) can allow threat actors (the person or group behind an attack) to take control of the targeted WordPress websites.

The security hole was patched with the release of version 3.1.8.10. Patchstack started seeing in-the-wild exploitation attempts on October 7.

The vulnerability tracked as CVE-2026-85097 can allow threat actors to take control of the targeted WordPress websites. The vulnerability is tracked as CVE-2026-85097 and it has a CVSS score of 9.8.

Unauthenticated attackers can exploit it to upload arbitrary files and execute malicious code. This can allow threat actors to take full control of the targeted WordPress websites.

Bricksforge is a commercial add-on for the Bricks visual site builder that layers extra tools onto WordPress sites, such as custom forms, animations, an email designer, and admin-area pages. Patchstack reported that it’s used by roughly 6,000 websites.