Index

Search

Search the public record. Drafts and scheduled notes are not included.

threats

Bricksforge WordPress plugin flaw CVE-2026-85097 exploited in the wild

Attackers are trying to exploit CVE-2026-85097 in the Bricksforge WordPress plugin to upload and run PHP code, Patchstack reports. CVSS 3.1 9.8 (Critical, scored by Wordfence). Versions up to 3.1.8.9 are affected. Fixed in 3.1.8.10 and 4.0.0. Not in CISA KEV.

Published 4h ago

CriticalActive Exploitation

CVE-2026-85097

Bricksforge WordPress plugin unauthenticated file upload to RCE

RCE

Published 6d ago