CVE-2026-85097: Bricksforge WordPress Plugin Flaw Exploited for Unauthenticated RCE

Reported by SOCRadar (Ömer Diken)

Summary by Cyber Security News12 Oct 2026, 17:27 CEST

About this summary. This is a short, independently written summary of an article first published by SOCRadar. Cyber Security News did not report or verify the underlying story. Read the original: https://socradar.io/blog/bricksforge-cve-2026-85097-exploited-rce/

CVE-2026-85097: Bricksforge WordPress Plugin Flaw Exploited for Unauthenticated RCE Threat actors are actively exploiting CVE-2026-85097, a maximum-severity (CVSS 10.0) vulnerability in the Bricksforge plugin for WordPress. The flaw lets unauthenticated attackers upload and execute arbitrary PHP code on vulnerable sites, resulting in remote code execution (RCE). Patchstack first observed exploitation attempts on October 7, 2026, at 21:47 UTC.

Read the full article at SOCRadar →

Source attribution: headline and facts are from SOCRadar (socradar.io). Summary method: excerpt of the source description. See our source attribution policy.

Related coverage

Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

Volexity Uncovers Stealthy Ivanti VPN Attack Using Three Zero-Day Vulnerabilities

CVE-2026-97229: Critical GitLab RCE

VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1

Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability

Cisco Nexus 3000 and 9000 Series Switches NGOAM Remote Code Execution Vulnerabilities