plugin

Bricksforge RCE Exploit Enables Unauthenticated Remote Code Execution

A CVSS 10.0 vulnerability (CVE-2026-85097) in the Bricksforge WordPress plugin allows attackers to execute arbitrary PHP code without authentication.