65 matches found
CVE-2026-14956 Bricksforge <= 3.1.8.6 - Unauthenticated Privilege Escalation via Pro Forms fieldIds Parameter
The Bricksforge plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.1.8.6. This is due to improper validation of the fieldIds parameter in the Pro Forms registration action, which allows attacker-supplied field IDs to be added to the trusted form-fie...
CVE-2026-14956
The Bricksforge plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.1.8.6. This is due to improper validation of the fieldIds parameter in the Pro Forms registration action, which allows attacker-supplied field IDs to be added to the trusted form-fie...
CVE-2026-14956: Improper Privilege Management
The Bricksforge plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.1.8.6. This is due to improper validation of the fieldIds parameter in the Pro Forms registration action, which allows attacker-supplied field IDs to be added to the trusted form-fie...
PT-2026-60679
The Bricksforge plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.1.8.6. This is due to improper validation of the fieldIds parameter in the Pro Forms registration action, which allows attacker-supplied field IDs to be added to the trusted form-fie...
EUVD-2026-37671
Unauthenticated Sensitive Data Exposure in Bricksforge = 3.1.8.4 versions...
CVE-2026-34888
Unauthenticated Sensitive Data Exposure in Bricksforge = 3.1.8.4 versions...
CVE-2026-34888 WordPress Bricksforge plugin <= 3.1.8.4 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Bricksforge = 3.1.8.4 versions...
CVE-2026-34888 WordPress Bricksforge plugin <= 3.1.8.4 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Bricksforge = 3.1.8.4 versions...
CVE-2026-34888
CVE-2026-34888 concerns the WordPress Bricksforge plugin (versions ≤ 3.1.8.4) with an unauthenticated sensitive data exposure vulnerability. The connected Patchstack entry specifies that it is a vulnerability in Bricksforge where sensitive data could be exposed without authentication, resulting i...
PT-2026-50300
Unauthenticated Sensitive Data Exposure in Bricksforge = 3.1.8.4 versions...
WordPress Bricksforge plugin <= 3.1.8.4 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by luc in WordPress Plugin Bricksforge versions = 3.1.8.4...
EUVD-2024-29140
Malicious code in bioql PyPI...
EUVD-2024-29138
Malicious code in bioql PyPI...
EUVD-2024-29139
Malicious code in bioql PyPI...
CVE-2024-31242
Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17...
CVE-2024-31243
Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17...
CVE-2024-31244
Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17...
CVE-2024-31244
Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17...
