Attackers exploit max-severity Bricksforge flaw to run code on WordPress sites
A CVSS 10.0 unauthenticated file upload flaw in the Bricksforge WordPress plugin has been exploited since October 7, Patchstack says. Sites should update to 3.1.8.10 or later.