Off-topic for aiqbench
This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.
WordPress Plugin Vulnerability Exploited in Attacks to Upload and eEecute Arbitrary PHP code
Attackers are targeting a critical security flaw in the Bricksforge WordPress plugin that lets them upload and run arbitrary PHP code without logging in. Tracked as CVE-2026-85097, the vulnerability carries a maximum CVSS score of 10.0 and can lead to remote code execution on affected websites. Patchstack first observed exploitation attempts on October 7, 2026, […] The post WordPress Plugin Vulnerability Exploited in Attacks to Upload and eEecute Arbitrary PHP code appeared first on Cyber Security News.
Attackers are targeting a critical security flaw in the Bricksforge WordPress plugin that lets them upload and run arbitrary PHP code without logging in. Tracked as CVE-2026-85097, the vulnerability carries a maximum CVSS score of 10.0 and can lead to remote code execution on affected websites. Patchstack first observed exploitation attempts on…
Excerpt shown under the publisher's RSS terms · 52 words · full text and figures are on the publisher's site
Related coverage
WordPress Plugin Vulnerability Exposes 100,000 Sites to Complete Site Takeover Attacks
Cybersecurity News · Aug 24, 2026
Critical wp2shell RCE Vulnerability – Complete Coverage Including PoC and Active Exploitation Details
Cybersecurity News · Jul 20, 2026
Critical WordPress Plugin Vulnerability Exposes 600,000 Sites to File Upload Attacks
Cybersecurity News · Aug 18, 2026
Tutor LMS Flaw Exposes 100,000+ WordPress Sites to Remote Code Execution
Cybersecurity News · Sep 18, 2026