Critical
CVE-2026-85097
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 27
Reset filters
Medium
CVE-2026-84814
Bricksforge <= 3.1.8.8 - Authenticated (Subscriber+) Privilege Escalation
Critical
CVE-2026-18030
Bricksforge <= 3.1.8.7 - Unauthenticated Privilege Escalation via Password Reset
Critical
CVE-2026-14956
Bricksforge <= 3.1.8.6 - Unauthenticated Privilege Escalation via Pro Forms fieldIds Parameter
Medium
CVE-2026-56009
Bricksable for Bricks Builder <= 1.6.83 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-41554
Bricks <= 1.9.2 - Reflected Cross-Site Scripting
Medium
CVE-2026-34888
Bricksforge <= 3.1.8.4 - Unauthenticated Information Exposure
Medium
CVE-2026-40723
Bricks Builder <= 2.1.4 - Missing Authorization
Medium
CVE-2025-69362
UiChemy <= 4.4.2 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2025-62013
UiChemy <= 4.0.0 - Missing Authorization
High
CVE-2025-6495
Bricks Builder <= 1.12.4 - Unauthenticated SQL Injection via `p` Parameter
High
CVE-2024-2297
Bricksbuilder <= 1.9.6.1 - Authenticated (Contributor+) Privilege Escalation via create_autosave
Medium
CVE-2024-51663
Bricksable for Bricks Builder <= 1.6.59 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-49665
Web Bricks Addons for Elementor <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-3410
Bricks <= 1.10.1 - Authenticated (Bricks Page Builder Access+) Stored Cross-Site Scripting
High
CVE-2024-43950
Brickscore <= 1.4.2.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-3408
Bricks <= 1.8.1 - Cross-Site Request Forgery via save_settings
Medium
CVE-2023-3409
Bricks <= 1.8.1 - Cross-Site Request Forgery via reset_settings
Medium
CVE-2024-4874
Bricks Builder <= 1.9.8 - Insecure Direct Object Reference
Medium
CVE-2024-32951
Max Addons Pro for Bricks <= 1.6.1 - Missing Authorization
Medium
CVE-2024-32952
Max Addons Pro for Bricks <= 1.6.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-31243
Bricksforge <= 2.0.17 - Missing Authorization to Unauthenticated WordPress Settings Deletion
Medium
CVE-2024-31244
Bricksforge <= 2.0.17 - Missing Authorization to Unauthenticated WordPress Settings Update
Medium
CVE-2024-31242
Bricksforge <= 2.0.17 - Missing Authorization to Unauthenticated Arbitrary Email Sending
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.