Bricksbuilder Bricks
7 CVEs affecting Bricksbuilder Bricks. Latest disclosed: 2025-02-27. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-3401 | High | 8.8 | 2022-10-28 | The Bricks theme for WordPress is vulnerable to remote code execution due to the theme allowing site editors to include executable code blocks in website conte… |
CVE-2024-2297 | High | 7.1 | 2025-02-27 | The Bricks theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.6.1. This is due to insufficient validation chec… |
CVE-2022-3400 | Medium | 6.5 | 2022-10-28 | The Bricks theme for WordPress is vulnerable to authorization bypass due to a missing capability check on the bricks_save_post AJAX action in versions 1.0 to 1… |
CVE-2023-3410 | Medium | 5.4 | 2024-09-14 | The Bricks theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘customTag' attribute in versions up to, and including, 1.10.1 due to insuf… |
CVE-2023-3409 | Medium | 5.4 | 2024-08-17 | The Bricks theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.1. This is due to missing or incorrect nonce v… |
CVE-2023-3408 | Medium | 4.3 | 2024-08-17 | The Bricks theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.1. This is due to missing or incorrect nonce v… |
CVE-2024-4874 | Medium | 4.3 | 2024-06-22 | The Bricks Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.9.8 via the postId parameter… |