CVE-2026-84814: WordPress Bricksforge plugin <= 3.1.8.8 - Privilege Escalation vulnerability
Published Sep 3, 2026
·Updated
Subscriber Privilege Escalation in Bricksforge <= 3.1.8.8 versions.
Affected Software
1 affected component
wordpress/bricksforge<=3.1.8.8
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Bricksforge Pluginto a version that resolves this vulnerability.Fixed in 3.1.8.9
Event History
Sep 3, 2026
CVE Published
via MITRE·04:31 PM
Data Sourced
via MITRE·04:31 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
Which installations are affected?
WordPress sites using the Bricksforge plugin at version 3.1.8.8 or earlier are affected.
2
Does exploiting this issue require an existing account or user interaction?
No. The supplied vector indicates the issue is exploitable over the network with low attack complexity, requires no privileges, and requires no user interaction.
3
What could an attacker gain through successful exploitation?
Successful exploitation can escalate privileges from the Subscriber role and is rated as having high confidentiality, integrity, and availability impact.