Vulnerability in Bricksforge
CVE-2026-18030
The BricksForge WordPress plugin before 3.1.8.8 does not verify the identity of the requester when processing a password change submitted through one of its form actions, allowing unauthenticated attackers to set an arbitrary password for…
Affected products
- Unknown Bricksforge — versions 0
References
- contact@wpscan.com (technical-description, exploit, vdb-entry)