[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUDbEzzhzXkTkISs1MI0yYGaFxji7CCTgjwC59dYCaao":3},{"article":4,"iocs":36,"watch_terms":41,"solutions":42,"lesson":103},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"6b4d2b92-47dd-44cd-890e-0892c01f2fc6","Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE","attackers-exploit-cvss-10-0-bricksforge-wordpress-flaw-enabling-unauthenticated--c9dce3","A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which allows unauthenticated attackers to upload and execute arbitrary PHP code on vulnerable WordPress websites, resulting in remote code execution (RCE). The","A critical vulnerability in the Bricksforge WordPress plugin, rated CVSS 10.0 and identified as CVE-2026-85097, is being actively exploited. This flaw allows unauthenticated attackers to execute arbitrary PHP code on vulnerable websites, leading to remote code execution (RCE). The vulnerability was reported by Patchstack, highlighting the immediate risk to WordPress sites using the affected plugin.","Bricksforge WordPress plugin flaw (CVE-2026-85097) is actively exploited for unauthenticated RCE.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F10\u002Fattackers-exploit-cvss-100-bricksforge.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEhrKeT1xQm0N8zjNRqWwsoqMm3kESRMqYnUJ9Wy6x9dEKlRVgZYDVqKqhu_2ZT7ZcCNd_RegNu2LtnUUQgL8R2OlK5LTyu9vKaCBRGTVrp05hGdB5wQrxFNi_eHnGxx-8yFR7maKT3tD_WBMVVBSeTyuku392tKdoOHIgvnj1tKQYU_Yq9anT5OKxUun4GW\u002Fs1600\u002Fwp-php.jpg","2026-10-12T09:02:14+00:00","2026-10-12T10:00:09.48712+00:00",9,[17,20],{"name":18,"type":19},"Bricksforge","product",{"name":21,"type":22},"WordPress","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":23,"icon":25,"name":26,"slug":27},null,"Vulnerabilities","vulnerabilities",[29,31],{"category":30},{"id":23,"icon":25,"name":26,"slug":27},{"category":32},{"id":33,"icon":25,"name":34,"slug":35},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",[37],{"type":38,"value":39,"context":40},"cve","CVE-2026-85097","Bricksforge WordPress plugin vulnerability",[18],{"controls":43,"vendors":102},[44,73],{"slug":45,"name":46,"problem":47,"products":48},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[49,57,65],{"vendor_slug":50,"vendor_name":51,"vendor_logo":52,"product_slug":53,"product_name":54,"url":55,"description":56},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":61,"product_name":62,"url":63,"description":64},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"slug":74,"name":75,"problem":76,"products":77},"patch-management","Automated patch management","Known holes get closed in days, not months.",[78,86,94],{"vendor_slug":79,"vendor_name":80,"vendor_logo":81,"product_slug":82,"product_name":83,"url":84,"description":85},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":87,"vendor_name":88,"vendor_logo":89,"product_slug":90,"product_name":91,"url":92,"description":93},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",[],{"slug":104,"title":105,"body":106,"framework_refs":107,"framework_notes":119},"cvss-100-wordpress-plugin-flaw-exploited-for-unauthenticated-rce","CVSS 10.0 WordPress Plugin Flaw Exploited for Unauthenticated RCE","A critical flaw in the Bricksforge WordPress plugin (CVE-2026-85097, CVSS 10.0) allows unauthenticated attackers to execute arbitrary PHP code, giving them full control over vulnerable sites without any credentials. The root cause lies in inadequate input validation and missing authentication checks within the plugin's code, a failure that should have been caught during development and pre-release security review. Active exploitation means that any site still running the vulnerable version is at immediate, high risk of complete compromise. This incident underscores how third-party plugins dramatically expand the WordPress attack surface, and why timely patching of external components is as critical as patching the core platform itself.",[108,109,110,111,112,113,114,115,116,117,118],"CIS Control 2 – Inventory and Control of Software Assets","CIS Control 7 – Continuous Vulnerability Management","CIS Control 13 – Network Monitoring and Defense","NIST SP 800-53 SI-2 (Flaw Remediation)","NIST SP 800-53 SI-3 (Malicious Code Protection)","NIST SP 800-53 RA-5 (Vulnerability Monitoring and Scanning)","NIST CSF ID.AM-2 (Software Inventory)","NIST CSF RS.MI-3 (Vulnerability Mitigation)","OWASP Top 10 A06:2021 – Vulnerable and Outdated Components","GDPR Article 32 – Security of Processing (patch management as a technical measure)","ITIL Change Management – Emergency Change process for critical patches",{}]