Bricks Bricks Builder vulnerabilities (CVE)

CVE records published for Bricks Bricks Builder, newest first. Follow to get an email when a new one appears.

3 results

7.5High

CVE-2026-118804 10 days ago

Bricks Broken Access Control via query_result Endpoint

Bricks Bricks Builder

Bricks Builder 2.4.3 and before contains a broken access control vulnerability that allows unauthenticated attackers to access restricted post content by submitting crafted post_status and post_type values in the originalQueryVars parameter to the POST /wp-js…

4.3Medium

CVE-2026-40723 4 months ago

WordPress Bricks Builder theme <= 2.1.4 - Broken Access Control vulnerability

Bricks Bricks Builder

Subscriber Broken Access Control in Bricks Builder <= 2.1.4 versions.

7.1High

CVE-2026-41554 6 months ago

WordPress Bricks Builder theme 1.9.2-2.2 - Cross Site Scripting (XSS) vulnerability

Bricks Bricks Builder

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bricks Builder allows Reflected XSS. This issue affects Bricks Builder: from n/a through 1.9.2 to 2.2.