Bricks Builder vulnerabilities

2 known vulnerabilities in Bricks Builder from Bricks. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Bricks Builder: Missing Authorization

  CVE-2026-118804Oct 28, 2026Bricks

  Bricks Builder 2.4.3 and before contains a broken access control vulnerability that allows unauthenticated attackers to access restricted post content by submitting crafted post_status and post_type values in the originalQueryVars parameter to the POST /wp-jso

• 7.1 High severity

  Bricks Builder: Improper Neutralization of Input During Web Page Generation

  CVE-2026-41554May 7, 2026Bricks

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bricks Builder allows Reflected XSS. This issue affects Bricks Builder: from n/a through 1.9.2 to 2.2.