Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Bricks Clear all filters
TI-2026-82758 CVE-2026-119325 · GHSA-g37c-4g9f-f29v

Broken access control in Bricks Theme exposes unpublished page content

Priority LOW 38

Bricks Theme 2.4 and before for WordPress contains an unauthenticated broken access control vulnerability in the load_popup_content REST endpoint that allows anonymous attackers to read draft and unpublished page content…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00241 Published 2026-10-29 Fixed in 2.4.1 CWE-639
TI-2026-82228 CVE-2026-118804 · GHSA-hr55-whqv-38v8

Broken access control in Bricks Builder exposes unpublished posts

Priority LOW 38

Bricks Builder 2.4.3 and before contains a broken access control vulnerability that allows unauthenticated attackers to access restricted post content by submitting crafted post_status and post_type values in the origina…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00249 Published 2026-10-28 Fixed in 2.4.4 CWE-862
TI-2026-82227 CVE-2026-118803 · GHSA-33cw-hwxh-f8g5

Unauthenticated dynamic data tag injection in Bricks Theme

Priority LOW 39

Bricks Theme 2.4.3 and before contains an unauthenticated dynamic-data tag injection vulnerability that allows anonymous attackers to control the urlParams object in the query_result REST endpoint, causing the submitted…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00369 Published 2026-10-28 Fixed in 2.4.4 CWE-1336