Risk Letters

Exploited vulnerability

CVE-2026-85097

TLP:CLEAR

bricksforge bricksforge Unrestricted Upload of File with Dangerous Type

The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions up to, and including, 3.1.8.9. This is due to insufficient validation of the attacker-controlled URL field in the 'temporaryFileUploads' parameter during form submission. An unauthenticated attacker can first obtain a valid nonce via the bricksforge_regenerate_nonce AJAX endpoint, then upload a

Facts

  • Vendor: bricksforge
  • Product: bricksforge
  • CVSS: 9.8
  • EPSS (probability of exploitation within 30 days): 3.3 %
  • First known exploitation: 7 October 2026
  • First seen by Risk Letters: 8 October 2026

Members see which Nordic sectors the flaw hits, and what to do about it.

Get the full brief

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX. NVD