importantSYS.SOURCE: Patchstack• 2026-10-12T14:32:14+05:30

Critical Unauthenticated RCE Vulnerability in Bricksforge WordPress Plugin Exploited

#vulnerability #wordpress #rce #security

A critical unauthenticated remote code execution (RCE) vulnerability (CVE-2026-85097) with a CVSS score of 10.0 has been actively exploited in the wild, enabling attackers to execute arbitrary PHP code on vulnerable WordPress sites via the Bricksforge plugin.

A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack.

The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which allows unauthenticated attackers to upload and execute arbitrary PHP code on vulnerable WordPress websites, resulting in remote code execution (RCE). The

Read original article

*** END OF TRANSMISSION ***

> FORMER PLAUD EXECUTIVE LAUNCHES AI APP AMBI WITH $26M FUNDING FOR CONTINUOUS BACKGROUND LISTENING > CYBERATTACK EXPLOITS SUPERMARKET REFRIGERATION SYSTEMS, CAUSING AUTOMATIC DEFROSTING ACROSS EUROPE > CITROEN REINTRODUCES ICONIC 2CV DESIGN AS ELECTRIC CITY CAR TO COMPETE IN EVOLVING MARKET > ENTERPRISE AI AGENT SECURITY RISKS AND PRIVACY CONCERNS > QGIS IMPLEMENTS STRICT POLICY BANNING AI-ASSISTED CONTRIBUTIONS > LEDGER INVESTIGATES UNAUTHORIZED HARDWARE IMPLANT IN CRYPTOBILIS-SOLD WALLETS LINKED TO FUND THEFT > CRITICAL SSRF VULNERABILITY IN SONICWALL SMA 1000 EXPLOITED POST-PATCH > DELOITTE ALLEGEDLY FALSIFIED DOCUMENTS TO FACILITATE TAX EVASION FOR ROMAN ABRAMOVICH > CRITICAL UNAUTHENTICATED RCE VULNERABILITY IN BRICKSFORGE WORDPRESS PLUGIN EXPLOITED > SUSPICIOUS CODE DISCOVERY IN ZOD 4.6.6 COMMIT> FORMER PLAUD EXECUTIVE LAUNCHES AI APP AMBI WITH $26M FUNDING FOR CONTINUOUS BACKGROUND LISTENING > CYBERATTACK EXPLOITS SUPERMARKET REFRIGERATION SYSTEMS, CAUSING AUTOMATIC DEFROSTING ACROSS EUROPE > CITROEN REINTRODUCES ICONIC 2CV DESIGN AS ELECTRIC CITY CAR TO COMPETE IN EVOLVING MARKET > ENTERPRISE AI AGENT SECURITY RISKS AND PRIVACY CONCERNS > QGIS IMPLEMENTS STRICT POLICY BANNING AI-ASSISTED CONTRIBUTIONS > LEDGER INVESTIGATES UNAUTHORIZED HARDWARE IMPLANT IN CRYPTOBILIS-SOLD WALLETS LINKED TO FUND THEFT > CRITICAL SSRF VULNERABILITY IN SONICWALL SMA 1000 EXPLOITED POST-PATCH > DELOITTE ALLEGEDLY FALSIFIED DOCUMENTS TO FACILITATE TAX EVASION FOR ROMAN ABRAMOVICH > CRITICAL UNAUTHENTICATED RCE VULNERABILITY IN BRICKSFORGE WORDPRESS PLUGIN EXPLOITED > SUSPICIOUS CODE DISCOVERY IN ZOD 4.6.6 COMMIT