Attackers are targeting a critical security flaw in the Bricksforge WordPress plugin that lets them upload and run arbitrary PHP code without logging in. Tracked as CVE-2026-85097, the vulnerability carries a maximum CVSS score of 10.0 and can lead to remote code execution on affected websites....

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

WordPress Plugin Vulnerability Exploited in Attacks to Upload and eEecute Arbitrary PHP code

VERWANDTEARTIKEL

LG webOS Flaws Let Remote Attackers Execute Commands as Root Without Authentication

CVE-2026-35001 - OpenS100 S-102 Parser Integer Overflow Heap Buffer Overflow

CVE-2026-89113 - SQL Injection vulnerability in SAP Commerce Cloud (OOTB Code)

CVE-2026-87689 - Metasploit Framework Web Service REST API Missing Authentication on Credential Endpoints

CVE-2026-89107 - Code Injection vulnerability in SAP S/4HANA (Manage Substitution/Validation Rules)

CVE-2026-89108 - Missing Authorization check in SAP Manufacturing Integration and Intelligence (Configuration Service)