CVE-2022-3400: Medium severity Bricksbuilder Bricks Wordpress vulnerability
The Bricks theme for WordPress is vulnerable to authorization bypass due to a missing capability check on the brickssavepost AJAX action in versions 1.0 to 1.5.3. This makes it possible for authenticated attackers with minimal permissions, such as a subscriber, to edit any page, post, or template on the vulnerable WordPress website.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-3400?
CVE-2022-3400 is classified as a medium severity vulnerability due to its potential exploitation by authenticated attackers.
How do I fix CVE-2022-3400?
To fix CVE-2022-3400, update the Bricks theme for WordPress to version 1.5.4 or later where the vulnerability has been patched.
Who is affected by CVE-2022-3400?
CVE-2022-3400 affects users of the Bricks theme for WordPress versions 1.0 to 1.5.3.
What type of attacks can be carried out using CVE-2022-3400?
Exploiting CVE-2022-3400 allows authenticated attackers with minimal permissions to edit any pages, posts, or templates.
Is CVE-2022-3400 fully mitigated by simply updating the plugin?
Yes, updating the Bricks theme to the latest version fully mitigates the risks associated with CVE-2022-3400.