Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE
1. Executive summary Attackers are actively exploiting CVE-2026-85097, a maximum-severity flaw in the Bricksforge plugin for WordPress that lets an unauthenticated attacker upload
12 Oct 2026 · 6 min read
read →