Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Bricksforge records in CISA KEVNo Bricksforge vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 55
The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions up to, and including, 3.1.8.9.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03287 · Published 2026-10-08 · No fix listed CWE-434
Priority MEDIUM 49
Subscriber Privilege Escalation in Bricksforge <= 3.1.8.8 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00483 · Published 2026-09-03 · No fix listed CWE-266
Priority MEDIUM 49
The Bricksforge plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.1.8.6.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00513 · Published 2026-07-17 · No fix listed CWE-269
Priority MEDIUM 42
Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00409 · Published 2024-06-09 · No fix listed CWE-862
Priority LOW 39
Unauthenticated Sensitive Data Exposure in Bricksforge <= 3.1.8.4 versions.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00303 · Published 2026-06-17 · No fix listed CWE-201
Priority LOW 39
Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0039 · Published 2024-06-09 · No fix listed CWE-862
Priority LOW 30
Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00359 · Published 2024-04-10 · No fix listed CWE-862
THREATIST.IORead the docs