<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: bricksforge</title><description>Every new CVE for bricksforge.</description><link>https://agentprime.io/</link><item><title>CVE-2026-85097: Bricksforge &lt;= 3.1.8.9 - Unauthenticated Arbitrary File Upload via &apos;temporaryFileUploads&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-85097/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-85097/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Oct 2026 06:42:09 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-84814: WordPress Bricksforge plugin &lt;= 3.1.8.8 - Privilege Escalation vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-84814/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-84814/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 03 Sep 2026 16:31:58 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-18030: Bricksforge &lt; 3.1.8.8 - Unauthenticated Arbitrary Password Reset via Pro Forms</title><link>https://agentprime.io/advisories/CVE-2026-18030/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-18030/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 10 Aug 2026 06:00:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-14956: Bricksforge &lt;= 3.1.8.6 - Unauthenticated Privilege Escalation via Pro Forms fieldIds Parameter</title><link>https://agentprime.io/advisories/CVE-2026-14956/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-14956/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 17 Jul 2026 01:30:52 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-34888: WordPress Bricksforge plugin &lt;= 3.1.8.4 - Sensitive Data Exposure vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-34888/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-34888/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 17 Jun 2026 09:50:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-31244: WordPress Bricksforge plugin &lt;= 2.0.17 - Unauthenticated Arbitrary WordPress Settings Change vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-31244/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-31244/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 09 Jun 2024 11:08:15 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-31243: WordPress Bricksforge plugin &lt;= 2.0.17 - Unauthenticated Arbitrary WordPress Setting Deletion vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-31243/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-31243/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 09 Jun 2024 11:06:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-31242: WordPress Bricksforge plugin &lt;= 2.0.17 - Unauthenticated Arbitrary Email Sending vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-31242/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-31242/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 10 Apr 2024 17:48:18 GMT</pubDate><category>CVE</category></item></channel></rss>