Bricks Bricks Builder vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Bricks Bricks Builder: 2 record(s), with affected versions and fixes.
CVE-2026-40723
Medium · 4.3
CWE-862 Jun 17, 2026
WordPress Bricks Builder theme <= 2.1.4 - Broken Access Control vulnerability
Subscriber Broken Access Control in Bricks Builder <= 2.1.4 versions.
CVE-2026-41554
High · 7.1
CWE-79 May 7, 2026
WordPress Bricks Builder theme 1.9.2-2.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bricks Builder allows Reflected XSS.
This issue affects Bricks Builder: from n/a through 1.9.2 to 2.2.