https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 09:30:50 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-288255 EUVD-2026-288255 https://cve.radiocsirt.org/vuln/euvd-2026-288255 https://cve.radiocsirt.org/vuln/fkie_cve-2024-2297 <p>The Bricks theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.6.1. This is due to insufficient validation checks placed on the create_autosave AJAX function. This makes it possible for authenticated attackers, with contributor-level access and above, to execute arbitrary PHP code with elevated (administrator-level) privileges. NOTE: Successful exploitation requires (1) the Bricks Builder to be enabled for posts (2) Builder access to be enabled for contributor-level users, and (3) &#34;Code Execution&#34; to be enabled for administrator-level users within the theme&#39;s settings.</p> <p>The Bricks theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.6.1. This is due to insufficient validation checks placed on the create_autosave AJAX function. This makes it possible for authenticated attackers, with contributor-level access and above, to execute arbitrary PHP code with elevated (administrator-level) privileges. NOTE: Successful exploitation requires (1) the Bricks Builder to be enabled for posts (2) Builder access to be enabled for contributor-level users, and (3) &#34;Code Execution&#34; to be enabled for administrator-level users within the theme&#39;s settings.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-2297 https://cve.radiocsirt.org/vuln/ghsa-6m6j-3p57-wq75 <p>The Bricks theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.6.1. This is due to insufficient validation checks placed on the create_autosave AJAX function. This makes it possible for authenticated attackers, with contributor-level access and above, to execute arbitrary PHP code with elevated (administrator-level) privileges. NOTE: Successful exploitation requires (1) the Bricks Builder to be enabled for posts (2) Builder access to be enabled for contributor-level users, and (3) &#34;Code Execution&#34; to be enabled for administrator-level users within the theme&#39;s settings.</p> <p>The Bricks theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.6.1. This is due to insufficient validation checks placed on the create_autosave AJAX function. This makes it possible for authenticated attackers, with contributor-level access and above, to execute arbitrary PHP code with elevated (administrator-level) privileges. NOTE: Successful exploitation requires (1) the Bricks Builder to be enabled for posts (2) Builder access to be enabled for contributor-level users, and (3) &#34;Code Execution&#34; to be enabled for administrator-level users within the theme&#39;s settings.</p> https://cve.radiocsirt.org/vuln/ghsa-6m6j-3p57-wq75 https://cve.radiocsirt.org/vuln/gsd-2024-2297 gsd-2024-2297 https://cve.radiocsirt.org/vuln/gsd-2024-2297