✉news Technology Cybersecurity first seen 5 d ago, last 4 d ago, peak #4

Hackers Exploit Critical WordPress Flaw in Bricksforge Plugin

Original: Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

Attackers are actively exploiting a maximum-severity vulnerability in the Bricksforge plugin for WordPress, which allows unauthenticated remote code execution on affected websites. With a CVSS score of 10.0, the flaw lets attackers take full control of vulnerable sites without needing any credentials. Site owners running Bricksforge are being urged to update the plugin immediately, as exploitation appears to be underway in the wild.

Why now: Active exploitation of a maximum-severity flaw threatens large numbers of WordPress sites, prompting urgent warnings.

Bricksforge WordPress The Hacker News

Open on news →

Rank over time, top of the chart is #1. 15 snapshots from 5 d ago to 4 d ago.

Evidence

Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE · The Hacker News

API: https://socialmediatrends-api.osmike.com/v1/trends/1976447