Bricksforge WordPress plugin: unauthenticated file upload to RCE exploited in the wild (CVE-2026-85097) ยท updates https://pwn.watch/i/bricksforge-wordpress-rce-cve-2026-85097 CVE-2026-85097 (CVSS 10.0) in the Bricksforge plugin for the Bricks builder lets unauthenticated attackers run PHP on a WordPress site. Bricksforge checks an upload's MIME type but trusts the url field in temporaryFileUploads at form submission, so attackers fetch a nonce, upload a GIF/PHP polyglot and have it written to a .php path. Patchstack saw exploitation from Oct 7 from 63 IPs. Versions through 3.1.8.9 are affected; update to 3.1.8.10 or later. en Mon, 12 Oct 2026 00:00:00 GMT Bricksforge WordPress plugin: unauthenticated file upload to RCE exploited in the wild (CVE-2026-85097): SecurityWeek reports in-the-wild exploitation; Bricksforge 3.1.8.10 and later fix it. https://pwn.watch/i/bricksforge-wordpress-rce-cve-2026-85097 https://pwn.watch/i/bricksforge-wordpress-rce-cve-2026-85097#2026-10-12-2a5c47f0 Mon, 12 Oct 2026 00:00:00 GMT critical <p><a href="https://www.securityweek.com/bricksforge-wordpress-plugin-vulnerability-exploited-in-the-wild/">Source</a></p> Bricksforge WordPress plugin: unauthenticated file upload to RCE exploited in the wild (CVE-2026-85097): Patchstack records the first exploitation attempts against CVE-2026-85097. https://pwn.watch/i/bricksforge-wordpress-rce-cve-2026-85097 https://pwn.watch/i/bricksforge-wordpress-rce-cve-2026-85097#2026-10-07-5cf5282a Wed, 07 Oct 2026 00:00:00 GMT critical <p><a href="https://www.securityweek.com/bricksforge-wordpress-plugin-vulnerability-exploited-in-the-wild/">Source</a></p>