CVE-2022-3400

The Bricks theme for WordPress (versions 1.0–1.5.3) is vulnerable to an authorization bypass due to a missing capability check on the bricks_save_post AJAX action. This allows authenticated users with minimal rights (e.g., a subscriber) to edit any page, post, or template on affected sites. Relat...