Vulnerability history
0 present
7 patched
Unauthenticated SQL Injection via `p` Parameter vulnerability
9.3
28 July, 2025
Authenticated (Contributor+) Privilege Escalation via create_autosave vulnerability
7.1
26 February, 2025
Authenticated (Bricks Page Builder Access+) Stored CrossSite Scripting vulnerability
5.9
16 September, 2024
CrossSite Request Forgery via save_settings vulnerability
4.3
19 August, 2024
Unauthenticated Remote Code Execution (RCE) vulnerability
10.0
13 February, 2024
