Read the docs

Bricks

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Bricks records in CISA KEV

No Bricks vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2026-82227 CVE-2026-118803 · GHSA-33cw-hwxh-f8g5

Unauthenticated dynamic data tag injection in Bricks Theme

Priority LOW 39

Bricks Theme 2.4.3 and before contains an unauthenticated dynamic-data tag injection vulnerability that allows anonymous attackers to control the urlParams object in the query_result REST endpoint, causing the submitted…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00369 Published 2026-10-28 Fixed in 2.4.4 CWE-1336
TI-2026-82758 CVE-2026-119325 · GHSA-g37c-4g9f-f29v

Broken access control in Bricks Theme exposes unpublished page content

Priority LOW 38

Bricks Theme 2.4 and before for WordPress contains an unauthenticated broken access control vulnerability in the load_popup_content REST endpoint that allows anonymous attackers to read draft and unpublished page content…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00241 Published 2026-10-29 Fixed in 2.4.1 CWE-639
TI-2026-82228 CVE-2026-118804 · GHSA-hr55-whqv-38v8

Broken access control in Bricks Builder exposes unpublished posts

Priority LOW 38

Bricks Builder 2.4.3 and before contains a broken access control vulnerability that allows unauthenticated attackers to access restricted post content by submitting crafted post_status and post_type values in the origina…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00249 Published 2026-10-28 Fixed in 2.4.4 CWE-862
Open these records in search →