Bricksforge WordPress Plugin Vulnerability Exploited in the Wild
BLUF
Active exploitation of CVE-2026-85097 allows full site takeover via the Bricksforge plugin.
NEWS
SecurityWeek reports that threat actors are actively exploiting CVE-2026-85097 to compromise WordPress sites running the Bricksforge plugin. This unauthenticated vulnerability grants attackers complete administrative control over affected installations. Exploitation attempts have been observed in the wild as of October 12, 2026.
Why I Care
Affected sites face immediate risk of defacement, data theft, and malware injection due to active exploitation. Any WordPress site using this plugin is vulnerable without patching, potentially leading to severe reputational and operational damage.
Next Steps
Update the Bricksforge plugin to the latest version immediately or uninstall it if no patch is available. System administrators should scan all WordPress instances for this plugin today and review access logs for signs of compromise.
Source: Security Week ·