Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE
Linked advisories
More on WordPress
Other advisories
- HighCVE-2026-110981Das WordPress-Plugin WP Photo Album Plus vor Version 9.
- MediumCVE-2026-110070Das WordPress-Plugin Modern Events Calendar Lite vor Version 7.
- MediumCVE-2026-110069Das WordPress-Plugin Modern Events Calendar Lite vor Version 7.
- MediumCVE-2026-110035Das Salon-Buchungssystem-WordPress-Plugin vor 10.
- MediumCVE-2026-110032Das WordPress-Plugin Salon Booking System vor Version 10.
- HighCVE-2026-110031Das WordPress-Plugin Salon Booking System vor Version 10.
- MediumCVE-2026-110026Das WordPress-Plugin Tasty Recipes Lite vor Version 1.
- MediumCVE-2026-109937Das WordPress-Plugin Otter Blocks vor Version 3.
Other news entries
- WordPress SEO plugin Rank Math compromised to backdoor websitesNewsBleepingComputer
- Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring BackdoorNewsThe Hacker News
- Rank Math PRO WordPress Plugin Compromised in Supply Chain AttackNewsSecurityWeek
- Bricksforge WordPress Plugin Vulnerability Exploited in the WildNewsSecurityWeek
- CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian RecordsNewsThe Hacker News
- WordPress: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Multiples vulnérabilités dans WordPress (07 octobre 2026)NewsCERT-FR (ANSSI)
- Ninja Forms plugin flaw exploited to hack WordPress sitesNewsBleepingComputer
Source: https://thehackernews.com/2026/10/attackers-exploit-cvss-100-bricksforge.html
ID