HIGHVulnerability
Global

Bricksforge WordPress Plugin Vulnerability Exploited in the Wild

·Source: SecurityWeek

Updated:

Executive Summary

The vulnerability tracked as CVE-2026-85097 can allow threat actors to take control of the targeted WordPress websites. The post Bricksforge WordPress Plugin Vulnerability Exploited in the Wild appeared first on SecurityWeek .

Analysis

The vulnerability tracked as CVE-2026-85097 can allow threat actors to take control of the targeted WordPress websites. The post Bricksforge WordPress Plugin Vulnerability Exploited in the Wild appeared first on SecurityWeek .

Indicators of Compromise (1)

CVE (1)
CVE-2026-85097
NVDMITRE CVE
Source Attribution

Originally published by SecurityWeek on Oct 12, 2026.

Related Threats

CRITICALVulnerabilityNEW

Critical PHP Patches Address 'Very, Very Bad Vulnerability'

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/critical-php-patches-address-very-very-bad-vulnerability-image_small-2-a-33162.jpg" align=right hspace=4><b>Immediate Updating Advised as Experts Warn Large-Scale Attacks Likely Imminent</b><br>Security experts are warning all organizations to immediately apply new fixes for two critical "PHP2Shell" vulnerabilities in widely used

Bank Info Security
CRITICALVulnerabilityNEW

PHP says AI review of critical bugs first sparked alarm in August, but signs surfaced in 2024

In a lengthy statement about two critical vulnerabilities, the PHP Foundation explained how one dated to 2024, how a recent third-party review by AI companies heightened attention on both, why it scrambled to post information earlier than planned.

The Record
MEDIUMVulnerability

PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors

The two RCE bugs can be exploited against WordPress, Drupal, Joomla, and other popular applications. The post PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors appeared first on SecurityWeek .

SecurityWeek