Bricks - vulnerabilities (CVEs)

4 CVEs in 2 products, 2 in the last 30 days, newest from 2026-10-28.

Products

• Bricks Builder - 3 CVEs
• Bricks Theme - 1 CVEs

Newest CVEs of Bricks

• CVE-2026-118804 - CVSS 7.5 (high), 2026-10-28: Bricks Builder 2.4.3 and before contains a broken access control vulnerability that allows unauthenticated attackers to access restricted post content by…
• CVE-2026-118803 - CVSS 7.5 (high), 2026-10-28: Bricks Theme 2.4.3 and before contains an unauthenticated dynamic-data tag injection vulnerability that allows anonymous attackers to control the urlParams…
• CVE-2026-40723 - CVSS 4.3 (medium), 2026-06-17: Subscriber Broken Access Control in Bricks Builder <= 2.1.4 versions.
• CVE-2026-41554 - CVSS 7.1 (high), 2026-05-07: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bricks Builder allows Reflected XSS. This issue affects…