69 matches found
CVE-2026-14956
The Bricksforge WordPress plugin is affected up to version 3.1.8.6, with a vulnerability in the Pro Forms registration action. The root cause is improper validation of the fieldIds parameter, allowing attacker-supplied field IDs to be added to the trusted form-field whitelist. This enables unauth...
CVE-2026-14956
The Bricksforge plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.1.8.6. This is due to improper validation of the fieldIds parameter in the Pro Forms registration action, which allows attacker-supplied field IDs to be added to the trusted form-fie...
CVE-2026-14956: Improper Privilege Management
The Bricksforge plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.1.8.6. This is due to improper validation of the fieldIds parameter in the Pro Forms registration action, which allows attacker-supplied field IDs to be added to the trusted form-fie...
PT-2026-60679
Name of the Vulnerable Software and Affected Versions Bricksforge versions prior to 3.1.8.7 Description The Bricksforge plugin for WordPress contains a privilege escalation flaw. The issue stems from improper validation of the fieldIds parameter within the Pro Forms registration action. This allo...
EUVD-2026-37671
Unauthenticated Sensitive Data Exposure in Bricksforge = 3.1.8.4 versions...
CVE-2026-34888
Unauthenticated Sensitive Data Exposure in Bricksforge = 3.1.8.4 versions...
CVE-2026-34888 WordPress Bricksforge plugin <= 3.1.8.4 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Bricksforge = 3.1.8.4 versions...
CVE-2026-34888
CVE-2026-34888 concerns the WordPress Bricksforge plugin (versions ≤ 3.1.8.4) with an unauthenticated sensitive data exposure vulnerability. The connected Patchstack entry specifies that it is a vulnerability in Bricksforge where sensitive data could be exposed without authentication, resulting i...
CVE-2026-34888 WordPress Bricksforge plugin <= 3.1.8.4 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Bricksforge = 3.1.8.4 versions...
PT-2026-50300
Unauthenticated Sensitive Data Exposure in Bricksforge = 3.1.8.4 versions...
CVE-2026-34888: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in Bricksforge = 3.1.8.4 versions...
WordPress Bricksforge plugin <= 3.1.8.4 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by luc in WordPress Plugin Bricksforge versions = 3.1.8.4...
EUVD-2024-29138
Malicious code in bioql PyPI...
EUVD-2024-29140
Malicious code in bioql PyPI...
EUVD-2024-29139
Malicious code in bioql PyPI...
CVE-2024-31242
Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17...
CVE-2024-31243
Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17...
CVE-2024-31244
Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17...