Bricksforge WordPress Plugin Vulnerability Exploited in the Wild
Summary
A vulnerability in the Bricksforge WordPress plugin, tracked as CVE-2026-85097, is actively being exploited by threat actors. This exploit allows attackers to gain control of compromised WordPress websites.
IFF Assessment
FOE
The vulnerability allows threat actors to take control of websites, which is detrimental to defenders.
Severity
9.8
Critical
Defender Context
This vulnerability in a popular WordPress plugin presents a significant risk to website owners. Defenders should prioritize patching or updating the Bricksforge plugin immediately to prevent unauthorized access and control. Monitoring WordPress sites for signs of compromise related to this exploit is also crucial.