{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Bricksforge WordPress plugin: unauthenticated file upload to RCE exploited in the wild (CVE-2026-85097) · updates",
  "home_page_url": "https://pwn.watch/i/bricksforge-wordpress-rce-cve-2026-85097",
  "feed_url": "https://pwn.watch/i/bricksforge-wordpress-rce-cve-2026-85097/feed.json",
  "description": "CVE-2026-85097 (CVSS 10.0) in the Bricksforge plugin for the Bricks builder lets unauthenticated attackers run PHP on a WordPress site. Bricksforge checks an upload's MIME type but trusts the url field in temporaryFileUploads at form submission, so attackers fetch a nonce, upload a GIF/PHP polyglot and have it written to a .php path. Patchstack saw exploitation from Oct 7 from 63 IPs. Versions through 3.1.8.9 are affected; update to 3.1.8.10 or later.",
  "language": "en",
  "_pwn": {
    "slug": "bricksforge-wordpress-rce-cve-2026-85097",
    "severity": "critical",
    "status": "live",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/bricksforge-wordpress-rce-cve-2026-85097/feed.xml",
    "llms": "https://pwn.watch/i/bricksforge-wordpress-rce-cve-2026-85097/llms.txt",
    "json": "https://pwn.watch/i/bricksforge-wordpress-rce-cve-2026-85097.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/bricksforge-wordpress-rce-cve-2026-85097#2026-10-12-2a5c47f0",
      "url": "https://pwn.watch/i/bricksforge-wordpress-rce-cve-2026-85097#2026-10-12-2a5c47f0",
      "title": "Bricksforge WordPress plugin: unauthenticated file upload to RCE exploited in the wild (CVE-2026-85097): SecurityWeek reports in-the-wild exploitation; Bricksforge 3.1.8.10 and later fix it.",
      "content_text": "Bricksforge WordPress plugin: unauthenticated file upload to RCE exploited in the wild (CVE-2026-85097): SecurityWeek reports in-the-wild exploitation; Bricksforge 3.1.8.10 and later fix it.\n\nSource: https://www.securityweek.com/bricksforge-wordpress-plugin-vulnerability-exploited-in-the-wild/",
      "date_published": "2026-10-12T00:00:00.000Z",
      "external_url": "https://www.securityweek.com/bricksforge-wordpress-plugin-vulnerability-exploited-in-the-wild/",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/bricksforge-wordpress-rce-cve-2026-85097#2026-10-07-5cf5282a",
      "url": "https://pwn.watch/i/bricksforge-wordpress-rce-cve-2026-85097#2026-10-07-5cf5282a",
      "title": "Bricksforge WordPress plugin: unauthenticated file upload to RCE exploited in the wild (CVE-2026-85097): Patchstack records the first exploitation attempts against CVE-2026-85097.",
      "content_text": "Bricksforge WordPress plugin: unauthenticated file upload to RCE exploited in the wild (CVE-2026-85097): Patchstack records the first exploitation attempts against CVE-2026-85097.\n\nSource: https://www.securityweek.com/bricksforge-wordpress-plugin-vulnerability-exploited-in-the-wild/",
      "date_published": "2026-10-07T00:00:00.000Z",
      "external_url": "https://www.securityweek.com/bricksforge-wordpress-plugin-vulnerability-exploited-in-the-wild/",
      "tags": [
        "critical"
      ]
    }
  ]
}