Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

3 hours ago [email protected] (The Hacker News)

A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack.

The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which allows unauthenticated attackers to upload and execute arbitrary PHP code on vulnerable WordPress websites, resulting in remote code execution (RCE). The

The post “Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE” appeared first on The Hacker News

Source:The Hacker News – [email protected] (The Hacker News)

Tags: Critical Severity, Exploit, Hacker, Hacker News, Vulnerability

CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records

5 hours ago [email protected] (The Hacker News)

P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands

3 days ago [email protected] (The Hacker News)

Vulnerabilities

Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access

3 days ago [email protected] (The Hacker News)

Vulnerabilities

Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects

3 days ago [email protected] (The Hacker News)

Vulnerabilities

Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge

3 days ago [email protected] (The Hacker News)

Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

3 days ago [email protected] (The Hacker News)