Critical Bricksforge Flaw Under Active Exploitation

A critical vulnerability (CVE-2026-85097) in the Bricksforge WordPress plugin, with a CVSS score of 10.0, is being actively exploited to achieve unauthenticated remote code execution (RCE). The flaw allows attackers to upload and execute arbitrary PHP code on vulnerable websites by exploiting insufficient validation of the ‘temporaryFileUploads’ parameter during form submission. Patches are available in version 3.1.8.10 and the latest version 4.0.1. Threat actors are observed targeting specific endpoints with crafted requests to bypass security measures and execute malicious payloads. Site owners are advised to update the plugin and audit incoming requests and file uploads.