Vulnerabilities

TI-2026-69443 CVE-2026-85097

Unrestricted file upload in Bricksforge WordPress plugin lets attackers run PHP

MEDIUM 55

The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions up to, and including, 3.1.8.9.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03287 Published 2026-10-08 No fix listed CWE-434

TI-2026-58311 CVE-2026-84814 · GHSA-26jm-67gf-j9fw

MEDIUM 49

Subscriber Privilege Escalation in Bricksforge <= 3.1.8.8 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00483 Published 2026-09-03 No fix listed CWE-266

TI-2026-12594 CVE-2026-14956 · GHSA-3h83-c8w5-cccx

MEDIUM 49

The Bricksforge plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.1.8.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00513 Published 2026-07-17 No fix listed CWE-269

TI-2026-27120 CVE-2026-34888 · GHSA-3ch4-xprr-gj8j

LOW 39

Unauthenticated Sensitive Data Exposure in Bricksforge <= 3.1.8.4 versions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00303 Published 2026-06-17 No fix listed CWE-201

TI-2024-20620 CVE-2024-31244 · GHSA-pq45-xxrc-cmvf

MEDIUM 42

Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00409 Published 2024-06-09 No fix listed CWE-862

TI-2024-20619 CVE-2024-31243 · GHSA-rq6x-8mg7-fp7v

LOW 39

Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0039 Published 2024-06-09 No fix listed CWE-862

TI-2024-20618 CVE-2024-31242 · GHSA-pm8c-xqrr-62h2

LOW 30

Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00359 Published 2024-04-10 No fix listed CWE-862