Bricks Builder vulnerabilities
7 published CVEs name Bricks Builder among the affected products.
- 7Published CVEs7 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-6495
Bricks Builder <= 1.12.4 - Unauthenticated SQL Injection via `p` Parameter
Bricks Builder · Bricks
High7.5 - CVE-2024-2297
Bricksbuilder <= 1.9.6.1 - Authenticated (Contributor+) Privilege Escalation via create_autosave
Bricks Builder · Bricks
High7.1 - CVE-2023-3410
Bricks <= 1.10.1 - Authenticated (Bricks Page Builder Access+) Stored Cross-Site Scripting
Bricks Builder · Bricks
Medium5.4 - CVE-2023-3408
Bricks <= 1.8.1 - Cross-Site Request Forgery via save_settings
Bricks Builder · Bricks
Medium4.3 - CVE-2023-3409
Bricks <= 1.8.1 - Cross-Site Request Forgery via reset_settings
Bricks Builder · Bricks
Medium5.4 - CVE-2022-3401
The Bricks theme for WordPress is vulnerable to remote code execution due to the theme allowing site editors to include executable code blocks in website…
Bricks Builder · Bricks
High8.8 - CVE-2022-3400
The Bricks theme for WordPress is vulnerable to authorization bypass due to a missing capability check on the bricks_save_post AJAX action in versions 1.0 to…
Bricks Builder · Bricks
Medium6.5