Bricks Theme vulnerabilities

2 known vulnerabilities in Bricks Theme from Bricks. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Bricks Theme: Authorization Bypass Through User-Controlled Key

  CVE-2026-119325Oct 29, 2026Bricks

  Bricks Theme 2.4 and before for WordPress contains an unauthenticated broken access control vulnerability in the load_popup_content REST endpoint that allows anonymous attackers to read draft and unpublished page content by supplying a popupId parameter withou

• 7.5 High severity

  Bricks Theme: Improper Neutralization of Special Elements Used in a Template Engine

  CVE-2026-118803Oct 28, 2026Bricks

  Bricks Theme 2.4.3 and before contains an unauthenticated dynamic-data tag injection vulnerability that allows anonymous attackers to control the urlParams object in the query_result REST endpoint, causing the submitted value to be re-parsed as a Bricks dynami