RC RANDOM CHAOS

wordpress

2 posts

Bricksforge RCE flaw exploited since October 7
Article

Bricksforge RCE flaw exploited since October 7

CVE-2026-85097, a CVSS 10.0 flaw in the Bricksforge WordPress plugin, is under active exploitation for unauthenticated RCE. Update to 4.0.1 and audit uploads.

 Bricksforge writes attacker PHP where the client asks
Article

Bricksforge writes attacker PHP where the client asks

A CVSS 10.0 unauthenticated RCE in the Bricksforge WordPress plugin (CVE-2026-85097) is under active exploitation. Update to 4.0.1 and audit uploads.