What’s Vulnerable › Vulnerabilities

CVE-2022-3400

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-10-28 · updated 2026-06-17
• Weakness: CWE-862

Description

The Bricks theme for WordPress is vulnerable to authorization bypass due to a missing capability check on the bricks_save_post AJAX action in versions 1.0 to 1.5.3. This makes it possible for authenticated attackers with minimal permissions, such as a subscriber, to edit any page, post, or template on the vulnerable WordPress website.

Affected products

• Bricks Builder Bricks: from 1.0 through 1.5.3

References

• https://bricksbuilder.io/
• https://www.wordfence.com/vulnerability-advisories-continued/#CVE-2022-3400
• https://bricksbuilder.io/
• https://www.wordfence.com/vulnerability-advisories-continued/#CVE-2022-3400

Get alerted when CVE-2022-3400 or the next vulnerability affects your stack