VYPR

Bricks Theme

by WordPress

CVEs (1)

  • CVE-2026-119325HigOct 29, 2026
    risk 0.49cvss 7.5epss 0.00

    Bricks Theme 2.4 and before for WordPress contains an unauthenticated broken access control vulnerability in the load_popup_content REST endpoint that allows anonymous attackers to read draft and unpublished page content by supplying a popupId parameter without any status or…