Mmastodon TechnologyCybersecurity first seen 4 d ago, last 4 d ago, peak #9

Attackers Exploit Maximum-Severity Flaw in WordPress Plugin Bricksforge

Original: Attackers Exploit Maximum-Severity Bricksforge Flaw to Seize WordPress Sites Bricksforge and several other WordPress plu

Attackers are actively exploiting CVE-2026-85097, a perfect CVSS 10.0 remote code execution flaw in the Bricksforge WordPress plugin, to take control of websites. Several other WordPress plugins are also being exploited. Security researchers urge anyone running Bricksforge to update or disable the plugin immediately, as compromises can lead to full site takeover.

Why now: Site owners and security professionals are racing to patch a maximum-severity flaw being actively exploited in the wild.

BricksforgeWordPressCVE-2026-85097

Open on mastodon →

Evidence

• Attackers Exploit Maximum-Severity Bricksforge Flaw to Seize WordPress Sites Bricksforge and several other WordPress plugins are actively exploited. The most critical is a CVE-2026-85097, a perfect CVSS 10.0 RCE flaw in Bricksforge. **If you use the Bricksforge plugin on your… · beyondmachines1@infosec.exchange · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/2097709