CVE-2026-14956

The Bricksforge plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.1.8.6. This is due to improper validation of the fieldIds parameter in the Pro Forms registration action, which allows attacker-supplied field IDs to be added to the trusted form-fie...

PT-2026-60679

Name of the Vulnerable Software and Affected Versions Bricksforge versions prior to 3.1.8.7 Description The Bricksforge plugin for WordPress contains a privilege escalation flaw. The issue stems from improper validation of the fieldIds parameter within the Pro Forms registration action. This allo...