Bricks Bricks Theme vulnerabilities (CVE)

CVE records published for Bricks Bricks Theme, newest first. Follow to get an email when a new one appears.

2 results
7.5High
CVE-2026-119325

Bricks Theme Broken Access Control via load_popup_content

Bricks Bricks Theme

Bricks Theme 2.4 and before for WordPress contains an unauthenticated broken access control vulnerability in the load_popup_content REST endpoint that allows anonymous attackers to read draft and unpublished page content by supplying a popupId parameter witho…