Security
Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE
The Hacker News·October 12, 2026·1 min read
A maximum-severity security flaw in the Bricksforge plugin for WordPress, CVE-2026-85097 (CVSS score: 10.0), is under active exploitation, according to Patchstack. The vulnerability allows unauthenticated attackers to upload and execute arbitrary PHP code on vulnerable websites, resulting in remote code execution. Site administrators are urged to patch immediately.
Read at The Hacker NewsDaily crypto arcade
Read the news, then play it.
Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.