CVSS 10.0 Bricksforge WordPress Flaw Under Active Exploitation for Unauthenticated RCE
RedSide Security October 13, 2026 Vulnerability 8 views
A CVSS 10.0 vulnerability in the Bricksforge WordPress plugin, CVE-2026-85097, is being actively exploited to achieve unauthenticated remote code execution. Site owners should patch immediately and hunt for signs of compromise.