Plugin icon

BricksForge

bricksforge

Vulnerabilities:

8

Last Updated:

n/a

Active Installs:

0

Published
Title
Fixed in
CVSS
Published
2026-10-07
Title
Bricksforge < 3.1.8.10 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter
Fixed in
Fixed in 3.1.8.10
CVSS
9.8 (critical)
Published
2026-09-02
Title
Bricksforge < 3.1.8.9 - Authenticated (Subscriber+) Privilege Escalation
Fixed in
Fixed in 3.1.8.9
CVSS
6.3 (medium)
Published
2026-08-04
Title
Bricksforge < 3.1.8.8 - Unauthenticated Arbitrary Password Reset via Pro Forms
Fixed in
Fixed in 3.1.8.8
CVSS
8.1 (high)
Published
2026-07-16
Title
Bricksforge < 3.1.8.7 - Unauthenticated Privilege Escalation via Pro Forms fieldIds Parameter
Fixed in
Fixed in 3.1.8.7
CVSS
9.8 (critical)
Published
2026-04-06
Title
Bricksforge < 3.1.8.5 - Unauthenticated Information Exposure
Fixed in
Fixed in 3.1.8.5
CVSS
5.3 (medium)
Published
2024-04-05
Title
Bricksforge < 2.1.1 - Missing Authorization to Unauthenticated Arbitrary Email Sending
Fixed in
Fixed in 2.1.1
CVSS
5.3 (medium)
Published
2024-04-05
Title
Bricksforge < 2.1.1 - Missing Authorization to Unauthenticated WordPress Settings Deletion
Fixed in
Fixed in 2.1.1
CVSS
5.3 (medium)
Published
2024-04-05
Title
Bricksforge < 2.1.1 - Missing Authorization to Unauthenticated WordPress Settings Update
Fixed in
Fixed in 2.1.1
CVSS
5.3 (medium)