High 7.1
2026-05-07< 2.3
CVE-2026-41554
Minimum safe version
2.3
Update to 2.3 or later to address 10 fixable vulnerabilities
CVE-2026-41554
Bricks Builder <= 1.12.4 - Unauthenticated SQL Injection via `p` Parameter
WordPress Bricks Builder Theme <= 1.9.6.1 is vulnerable to Privilege Escalation
WordPress Bricks Builder Theme <= 1.10.1 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-3409
WordPress Bricks Builder Theme <= 1.8.1 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2024-25600
Bricks <= 1.9.6 - Unauthenticated Remote Code Execution
CVE-2022-3400
CVE-2022-3401