A maximum-severity security flaw rated CVSS 10.0 affecting the Bricksforge WordPress plugin is currently under active exploitation in the wild. The vulnerability allows unauthenticated attackers to upload and execute arbitrary PHP code, achieving remote code execution. Administrators should patch immediately.

WordPressRCEBricksforgeCVE-2026-85097
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →