CVE-2024-2297

The Bricks WordPress theme (Bricks) is vulnerable to authenticated Privilege Escalation via the create_autosave AJAX function in versions up to and including 1.9.6.1. Exploitation requires Post Builder to be enabled, builder access for contributor-level users, and Code Execution enabled for admin...

CVE-2022-3401

CVE-2022-3401 concerns the Bricks theme for WordPress. The connected documents report a remote code execution vulnerability in versions 1.2–1.5.3 caused by the theme allowing editors to include executable code blocks in content, which, together with the related authorization bypass (CVE-2022-3400...