Bricks Builder vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 20243
3. 20252

Newest CVEs

• CVE-2025-6495

  Bricks Builder <= 1.12.4 - Unauthenticated SQL Injection via `p` Parameter

  Bricks Builder · Bricks

  High7.5
• CVE-2024-2297

  Bricksbuilder <= 1.9.6.1 - Authenticated (Contributor+) Privilege Escalation via create_autosave

  Bricks Builder · Bricks

  High7.1
• CVE-2023-3410

  Bricks <= 1.10.1 - Authenticated (Bricks Page Builder Access+) Stored Cross-Site Scripting

  Bricks Builder · Bricks

  Medium5.4
• CVE-2023-3408

  Bricks <= 1.8.1 - Cross-Site Request Forgery via save_settings

  Bricks Builder · Bricks

  Medium4.3
• CVE-2023-3409

  Bricks <= 1.8.1 - Cross-Site Request Forgery via reset_settings

  Bricks Builder · Bricks

  Medium5.4
• CVE-2022-3401

  The Bricks theme for WordPress is vulnerable to remote code execution due to the theme allowing site editors to include executable code blocks in website…

  Bricks Builder · Bricks

  High8.8
• CVE-2022-3400

  The Bricks theme for WordPress is vulnerable to authorization bypass due to a missing capability check on the bricks_save_post AJAX action in versions 1.0 to…

  Bricks Builder · Bricks

  Medium6.5