What’s Vulnerable › Products
Bricks Builder Bricks vulnerabilities
9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Check whether your Bricks Builder Bricks version is affected
Latest Bricks Builder Bricks vulnerabilities
- CVE-2025-6495 — Bricks Builder <= 1.12.4 - Unauthenticated SQL Injection via `p` Parameter (CVSS 7.5)
- CVE-2024-2297 — Bricksbuilder <= 1.9.6.1 - Authenticated (Contributor+) Privilege Escalation via create_autosave (CVSS 8.8)
- CVE-2023-3410 — Bricks <= 1.10.1 - Authenticated (Bricks Page Builder Access+) Stored Cross-Site Scripting (CVSS 5.4)
- CVE-2023-3409 — Bricks <= 1.8.1 - Cross-Site Request Forgery via reset_settings (CVSS 4.3)
- CVE-2023-3408 — Bricks <= 1.8.1 - Cross-Site Request Forgery via save_settings (CVSS 4.3)
- CVE-2024-4874 — Bricks Builder <= 1.9.8 - Insecure Direct Object Reference (CVSS 4.3)
- CVE-2024-25600 — WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability (CVSS 10.0)
- CVE-2022-3401 — (CVSS 8.8)
- CVE-2022-3400 — (CVSS 6.5)