Attackers are targeting a critical security flaw in the Bricksforge WordPress plugin that lets them upload and run arbitrary PHP code without logging in. Tracked as CVE-2026-85097, the vulnerability carries a maximum CVSS score of 10.0 and can lead to remote code execution on affected websites. Patchstack first observed exploitation attempts on October 7, 2026, […]
This article has been indexed from Cyber Security News
Read the original article: