CyberSecBulletin

Bricks Builder vulnerabilities

We track 2 vulnerabilities in Bricks Builder products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 29, 2025.

2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score

Latest Bricks Builder vulnerabilities

  • 7.5 High severity

    Bricks: Improper Neutralization of Special Elements used in an SQL Command

    CVE-2025-6495Bricks Builder

    The Bricks theme for WordPress is vulnerable to blind SQL Injection via the ā€˜p’ parameter in all versions up to, and including, 1.12.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Thi

  • 8.8 High severity

    Bricks: Improper Privilege Management

    CVE-2024-2297Bricks Builder

    The Bricks theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.6.1. This is due to insufficient validation checks placed on the create_autosave AJAX function. This makes it possible for authenticated attackers, w