Mmastodon TechnologyCybersecurity first seen 7 d ago, last 7 d ago, peak #12

Critical Bricksforge WordPress Flaw Actively Exploited

Original: ⚠️ CRITICAL: Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE Bricksforge WordPress p

Security researchers report that the Bricksforge WordPress plugin contains a critical vulnerability, CVE-2026-85097, rated CVSS 10.0, which allows unauthenticated remote code execution. Attackers are reportedly actively exploiting the flaw to run arbitrary PHP code on vulnerable WordPress sites. Site administrators are being urged to patch or mitigate immediately.

Why now: A maximum-severity, actively exploited WordPress vulnerability is an urgent risk for site owners and security teams.

BricksforgeWordPressCVE-2026-85097

Open on mastodon →

Evidence

• ⚠️ CRITICAL: Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE Bricksforge WordPress plugin (CVE-2026-85097) has a CVSS 10.0 flaw allowing unauthenticated remote code execution. Attackers are actively exploiting this to run arbitrary PHP on… · threatnoir@infosec.exchange · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/1983709