EUVD-2026-112502

Bricks Theme 2.4.3 and before contains an unauthenticated dynamic-data tag injection vulnerability that allows anonymous attackers to control the urlParams object in the queryresult REST endpoint, causing the submitted value to be re-parsed as a Bricks dynamic data tag. Attackers can inject tags...

CVE-2026-118803

Bricks Theme version 2.4.3 and before is vulnerable to an unauthenticated dynamic-data tag injection vulnerability within the query_result REST endpoint. The root cause allows anonymous attackers to manipulate the urlParams object, forcing the system to re-parse submitted values as Bricks dynamic...

TryHack3M-Bricks-Heist

target:10.201.6.98 enumeration nmap -A 10.201.6.98 since there is a wordpress with name "brick by brick" and the name of this room is brick it is probably where we can find vulnerability so lets enumerate wordpress wpscan --url https://bricks.thm --disable-tls-checks running with tls-checks wont...

CVE-2024-25600_Nuclei-Template

CVE-2024-25600Nuclei-Template Nuclei template and information about the POC for CVE-2024-25600 Description 📝 The Bricks theme for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.9.6. This makes it possible for unauthenticated attackers to execute code on t...

CVE-2024-2297

The Bricks theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.6.1. This is due to insufficient validation checks placed on the createautosave AJAX function. This makes it possible for authenticated attackers, with contributor-level access and above...

EUVD-2024-27252

Malicious code in bioql PyPI...

EUVD-2022-42777

Malicious code in bioql PyPI...

EUVD-2025-22967

Malicious code in bioql PyPI...

EUVD-2023-44077

Malicious code in bioql PyPI...

EUVD-2023-44075

Malicious code in bioql PyPI...

EUVD-2023-44076

Malicious code in bioql PyPI...

CVE-2025-6495

The Bricks theme for WordPress is vulnerable to blind SQL Injection via the ‘p’ parameter in all versions up to, and including, 1.12.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticat...

CVE-2025-6495

The Bricks theme for WordPress is vulnerable to blind SQL Injection via the ‘p’ parameter in all versions up to, and including, 1.12.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticat...

CVE-2025-6495

CVE-2025-6495 affects the Bricks theme for WordPress (prior to 1.12.5; versions up to 1.12.4) with a blind SQL Injection via the p parameter caused by insufficient escaping and inadequate SQL query preparation. Exploitation is unauthenticated and can lead to leakage of sensitive data. Remediation...

CVE-2025-6495: Improper Neutralization of Special Elements used in an SQL Command

The Bricks theme for WordPress is vulnerable to blind SQL Injection via the ‘p’ parameter in all versions up to, and including, 1.12.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticat...

PT-2025-31168 · WordPress · Bricks Theme For Wordpress

Name of the Vulnerable Software and Affected Versions: Bricks theme for WordPress versions prior to 1.12.5 Description: The Bricks theme for WordPress is susceptible to a blind SQL Injection issue via the p parameter. Insufficient escaping of user-supplied input and inadequate preparation of...

VulnCheck KEV: CVE-2025-6495

The Bricks theme for WordPress is vulnerable to blind SQL Injection via the ‘p’ parameter in all versions up to, and including, 1.12.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticat...

CVE-2023-3408

The Bricks theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.1. This is due to missing or incorrect nonce validation on the 'savesettings' function. This makes it possible for unauthenticated attackers to modify the theme's settings, including...

CVE-2023-3410

The Bricks theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘customTag' attribute in versions up to, and including, 1.10.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with access to the Bricks Builder...

CVE-2023-3409

The Bricks theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.1. This is due to missing or incorrect nonce validation on the 'resetsettings' function. This makes it possible for unauthenticated attackers to reset the theme's settings via a forged...