CVE-2026-118804

Bricks Builder version 2.4.3 and earlier is vulnerable to a broken access control flaw. Unauthenticated attackers can exploit the POST /wp-json/bricks/v1/query_result REST endpoint by providing a publicly obtainable nonce and crafted post_status and post_type values within the originalQueryVars p...