Advisories · Technology
Bricksforge.
Every CVE that names Bricksforge among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
Bricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter
- Bricksforge
- Unrestricted file upload
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Bricksforge plugin <= 3.1.8.8 - Privilege Escalation vulnerability
- Bricksforge
- Privilege escalation
- CVSS 8.1 High
Bricksforge < 3.1.8.8 - Unauthenticated Arbitrary Password Reset via Pro Forms
- BricksForge
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
Bricksforge <= 3.1.8.6 - Unauthenticated Privilege Escalation via Pro Forms fieldIds Parameter
- Bricksforge
- Privilege escalation
- CVSS 7.5 High
WordPress Bricksforge plugin <= 3.1.8.4 - Sensitive Data Exposure vulnerability
- Bricksforge
- Information disclosure
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Bricksforge plugin <= 2.0.17 - Unauthenticated Arbitrary WordPress Settings Change vulnerability
- Bricksforge
- Broken access control
- CVSS 7.5 High
WordPress Bricksforge plugin <= 2.0.17 - Unauthenticated Arbitrary WordPress Setting Deletion vulnerability
- Bricksforge
- Broken access control
- CVSS 5.3 Medium
WordPress Bricksforge plugin <= 2.0.17 - Unauthenticated Arbitrary Email Sending vulnerability
- Bricksforge
- Broken access control