CVE-2026-85097: Patch the Bricksforge RCE and Check for a Breach (2026)
CVE-2026-85097 is as bad as a WordPress plugin flaw gets: an unauthenticated arbitrary file upload in Bricksforge that lets anyone on the internet drop and execute PHP on your server. No login, no user interaction, full site takeover. Patchstack rates it CVSS 10.0, Wordfence rates it 9.8 — the difference is academic. What matters is … Read more