Skip to content
Threat Feed
Subscribe

Vendor

Bricksforge

2 briefs RSS
critical advisory

Unauthenticated Arbitrary File Upload in Bricksforge WordPress Plugin

The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload via the 'temporaryFileUploads' parameter in versions up to 3.1.8.9, enabling remote code execution.

Bricksforge web-application-vulnerability wordpress remote-code-execution
1r 1t 1c
critical advisory

Bricksforge WordPress Plugin Privilege Escalation Vulnerability (CVE-2026-14956)

The Bricksforge plugin for WordPress, in versions up to and including 3.1.8.6, contains a critical privilege escalation vulnerability, CVE-2026-14956, allowing unauthenticated attackers to register new administrator accounts by manipulating the 'fieldIds' parameter in Pro Forms registration actions, leading to full compromise of the WordPress site.

Bricksforge plugin wordpress plugin privilege-escalation vulnerability webserver
1t 1c