A critical security flaw in the Bricksforge WordPress plugin is being actively exploited by attackers. The vulnerability, rated with a maximum severity score of 10.0, allows unauthenticated users to upload and execute malicious PHP code on affected websites. The flaw impacts Bricksforge versions up to 3.1.8.9, and patches have been released in version 3.1.8.10. The plugin serves as a tool for building websites using the Bricks visual builder platform. Patchstack detected exploitation attempts beginning in October 2026.
The vulnerability stems from inadequate validation of file metadata during form submissions. Attackers exploit this by uploading a file that is simultaneously a valid image and contains PHP code, then submitting a form that causes the server to save the file with a PHP extension, resulting in code execution. Security experts recommend that users update to the latest plugin version and audit their websites for suspicious PHP files in temporary upload directories. Additionally, approximately 573,000 WordPress sites were compromised during the second quarter of 2026, with attackers primarily targeting high-severity vulnerabilities in various plugins.
Source: Read the full story at The Hacker News
This summary was written with AI assistance from the linked source.
Send this to yourself, or to someone who should see it
Enter your email and we will send you a link to this article.
