Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack.

The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which allows unauthenticated attackers to upload and execute arbitrary PHP code on vulnerable WordPress websites, resulting in remote code execution (RCE). The

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Another researcher says OpenAI trained on conversations, then claimed breakthrou

Another researcher says OpenAI trained on conversations, then claimed breakthrou Source: Hacker News

Attack Update: Top 5 Attack-IPs auf doode.info – 06.10.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 β€” 986 requests (recent log) 85.203.21.103 β€” 605 requests (recent log) 216.73.217.111 β€” 340 requests (recent

Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems

Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems Brazilian financial services, retail, and e-commerce organizations have become the target of a financially motivated threat actor dubbed Breeze