Vulnerabilities in Bricks Builder
7 resultsCVE-2022-3401HIGHThe Bricks theme for WordPress is vulnerable to remote code execution due to the theme allowing site editors to include executable code blocEPSS 1.6%CVE-2022-3400MEDIUMThe Bricks theme for WordPress is vulnerable to authorization bypass due to a missing capability check on the bricks_save_post AJAX action iEPSS 0.6%CVE-2025-6495HIGHBricks Builder <= 1.12.4 - Unauthenticated SQL Injection via `p` ParameterEPSS 0.4%CVE-2024-2297HIGHBricksbuilder <= 1.9.6.1 - Authenticated (Contributor+) Privilege Escalation via create_autosaveEPSS 0.3%CVE-2023-3410MEDIUMBricks <= 1.10.1 - Authenticated (Bricks Page Builder Access+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2023-3408MEDIUMBricks <= 1.8.1 - Cross-Site Request Forgery via save_settingsEPSS 0.2%CVE-2023-3409MEDIUMBricks <= 1.8.1 - Cross-Site Request Forgery via reset_settingsEPSS 0.2%