Bricks Builder Bricks

• CVE-2025-6495 High 7.5 Bricks Builder <= 1.12.4 - Unauthenticated SQL Injection via `p` Parameter 0.5%
• CVE-2024-2297 High 7.1 Bricksbuilder <= 1.9.6.1 - Authenticated (Contributor+) Privilege Escalation via create_autosave 0.4%
• CVE-2023-3410 Medium 5.4 Bricks <= 1.10.1 - Authenticated (Bricks Page Builder Access+) Stored Cross-Site Scripting 0.3%
• CVE-2023-3408 Medium 4.3 Bricks <= 1.8.1 - Cross-Site Request Forgery via save_settings 0.2%
• CVE-2023-3409 Medium 5.4 Bricks <= 1.8.1 - Cross-Site Request Forgery via reset_settings 0.2%
• CVE-2022-3401 High 8.8 The Bricks theme for WordPress is vulnerable to remote code execution due to the theme allowing site editors to include executable code blocks in website content in versions 1.2 to 1.5.3. This, combin 2.2%
• CVE-2022-3400 Medium 6.5 The Bricks theme for WordPress is vulnerable to authorization bypass due to a missing capability check on the bricks_save_post AJAX action in versions 1.0 to 1.5.3. This makes it possible for authenti 0.7%