Bricksforge

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Bricksforge

Information

Software Type Plugin
Software Slug bricksforge
Software Status Active
Software Author Bricksforge
Software Website bricksforge.io
Software Record Last Updated July 14, 2026

8 Vulnerabilities

Submit a Vulnerability
Bricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter
9.8
CVE-2026-85097
Oct 7, 2026
Researcher: d.v4n_s3c
Bricksforge <= 3.1.8.8 - Authenticated (Subscriber+) Privilege Escalation
6.3
CVE-2026-84814
Sep 2, 2026
Researcher: dutafi
Bricksforge <= 3.1.8.7 - Unauthenticated Privilege Escalation via Password Reset
9.8
CVE-2026-18030
Aug 4, 2026
Researcher: moonge
Bricksforge <= 3.1.8.6 - Unauthenticated Privilege Escalation via Pro Forms fieldIds Parameter
9.8
CVE-2026-14956
Jul 16, 2026
Researcher: 0xd4rk5id3
Bricksforge <= 3.1.8.4 - Unauthenticated Information Exposure
5.3
CVE-2026-34888
Apr 6, 2026
Researcher: luc
Bricksforge <= 2.0.17 - Missing Authorization to Unauthenticated WordPress Settings Update
5.3
CVE-2024-31244
Apr 5, 2024
Researcher: Dave Jong
Bricksforge <= 2.0.17 - Missing Authorization to Unauthenticated WordPress Settings Deletion
5.3
CVE-2024-31243
Apr 5, 2024
Researcher: Dave Jong
Bricksforge <= 2.0.17 - Missing Authorization to Unauthenticated Arbitrary Email Sending
5.3
CVE-2024-31242
Apr 5, 2024
Researcher: Dave Jong
Title Status CVE ID CVSS Researchers Date
Bricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter Patched CVE-2026-85097 9.8 d.v4n_s3c October 7, 2026
Bricksforge <= 3.1.8.8 - Authenticated (Subscriber+) Privilege Escalation Patched CVE-2026-84814 6.3 dutafi September 2, 2026
Bricksforge <= 3.1.8.7 - Unauthenticated Privilege Escalation via Password Reset Patched CVE-2026-18030 9.8 moonge August 4, 2026
Bricksforge <= 3.1.8.6 - Unauthenticated Privilege Escalation via Pro Forms fieldIds Parameter Patched CVE-2026-14956 9.8 0xd4rk5id3 July 16, 2026
Bricksforge <= 3.1.8.4 - Unauthenticated Information Exposure Patched CVE-2026-34888 5.3 luc April 6, 2026
Bricksforge <= 2.0.17 - Missing Authorization to Unauthenticated WordPress Settings Update Patched CVE-2024-31244 5.3 Dave Jong April 5, 2024
Bricksforge <= 2.0.17 - Missing Authorization to Unauthenticated WordPress Settings Deletion Patched CVE-2024-31243 5.3 Dave Jong April 5, 2024
Bricksforge <= 2.0.17 - Missing Authorization to Unauthenticated Arbitrary Email Sending Patched CVE-2024-31242 5.3 Dave Jong April 5, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation