2 matches found
EUVD-2026-94793
The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions up to, and including, 3.1.8.9. This is due to insufficient validation of the attacker-controlled URL field in the 'temporaryFileUploads' parameter during form submission. An unauthenticated...
9.8CVSS6.5AI score0.03287EPSS
SaveExploits4References2
VulnCheck KEV: CVE-2026-85097
The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions up to, and including, 3.1.8.9. This is due to insufficient validation of the attacker-controlled URL field in the 'temporaryFileUploads' parameter during form submission. An unauthenticated...
9.8CVSS6.5AI score0.03287EPSS
SaveIn wildExploits4References3
20