EUVD-2026-112502

Bricks Theme 2.4.3 and before contains an unauthenticated dynamic-data tag injection vulnerability that allows anonymous attackers to control the urlParams object in the queryresult REST endpoint, causing the submitted value to be re-parsed as a Bricks dynamic data tag. Attackers can inject tags...

CVE-2026-118803

Bricks Theme version 2.4.3 and before is vulnerable to an unauthenticated dynamic-data tag injection vulnerability within the query_result REST endpoint. The root cause allows anonymous attackers to manipulate the urlParams object, forcing the system to re-parse submitted values as Bricks dynamic...