PT-2022-21959 · WordPress · Bricks

Name of the Vulnerable Software and Affected Versions: The Bricks theme for WordPress versions 1.0 through 1.5.3 Description: The issue is related to authorization bypass due to a missing capability check on the bricks save post AJAX action. This allows authenticated attackers with minimal...