Vulnerabilidades de Bricks Bricks Builder (CVE)

Registros CVE publicados para Bricks Bricks Builder, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

3 resultados

7.5Alta

CVE-2026-118804 hace 10 días

Bricks Broken Access Control via query_result Endpoint

Bricks Bricks Builder

Bricks Builder 2.4.3 and before contains a broken access control vulnerability that allows unauthenticated attackers to access restricted post content by submitting crafted post_status and post_type values in the originalQueryVars parameter to the POST /wp-js…

4.3Media

CVE-2026-40723 hace 4 meses

WordPress Bricks Builder theme <= 2.1.4 - Broken Access Control vulnerability

Bricks Bricks Builder

Subscriber Broken Access Control in Bricks Builder <= 2.1.4 versions.

7.1Alta

CVE-2026-41554 hace 6 meses

WordPress Bricks Builder theme 1.9.2-2.2 - Cross Site Scripting (XSS) vulnerability

Bricks Bricks Builder

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bricks Builder allows Reflected XSS. This issue affects Bricks Builder: from n/a through 1.9.2 to 2.2.