All 7 CVE vulnerabilities found in Bricks, with AI-generated Chinese analysis, references, and POCs.
Vendor: Bricks Builder
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-6495 | Bricks Builder <= 1.12.4 - Unauthenticated SQL Injection via `p` Parameter CWE-89 | 7.5 | High | 2025-07-29 |
| CVE-2024-2297 | Bricksbuilder <= 1.9.6.1 - Authenticated (Contributor+) Privilege Escalation via create_autosave CWE-269 | 7.1 | High | 2025-02-27 |
| CVE-2023-3410 | Bricks <= 1.10.1 - Authenticated (Bricks Page Builder Access+) Stored Cross-Site Scripting CWE-79 | 5.4 | Medium | 2024-09-14 |
| CVE-2023-3408 | Bricks <= 1.8.1 - Cross-Site Request Forgery via save_settings CWE-352 | 4.3 | Medium | 2024-08-17 |
| CVE-2023-3409 | Bricks <= 1.8.1 - Cross-Site Request Forgery via reset_settings CWE-352 | 5.4 | Medium | 2024-08-17 |
| CVE-2022-3401 | WordPress theme Bricks 代码注入漏洞 | 8.8 | High | 2022-10-28 |
| CVE-2022-3400 | WordPress theme Bricks 安全漏洞 | 6.5 | Medium | 2022-10-28 |
All 7 known CVE vulnerabilities affecting Bricks with full Chinese analysis, references, and POCs where available.