Tag: cve 2026 85097

Attackers Exploit Bricksforge WordPress Flaw for Unauthenticated RCE

A critical flaw in the Bricksforge WordPress plugin, rated CVSS 10.0, allows hackers to upload and execute malicious code on vulnerable sites without needing login credentials. This gaping security hole is being actively exploited, putting sites at risk of remote code execution.