12 October 2026
Reference: CVE-2026-85097
1. What is being reported?
The Bricksforge plugin, used with WordPress websites, has a flaw that lets attackers upload dangerous files by tricking the system during file uploads. They can then run harmful code on the website server, potentially taking full control of the site.
2. What this means in plain English
If your website uses this plugin and is not updated, hackers could break in remotely without any password, putting your business data and website at risk. This could lead to website downtime, data loss, or your site being used for illegal activities.
3. Could this affect a small business?
Small businesses or organisations using WordPress with the Bricksforge plugin version 3.1.8.9 or earlier are at risk. If you do not use this plugin, or use a different website system, this vulnerability does not affect you.
4. What to do now
- Check if your website uses the Bricksforge plugin and note its version.
- Ask your website manager or IT provider to update the Bricksforge plugin to the latest safe version immediately.
- If you cannot update right away, consider temporarily disabling the plugin or your website until a fix is applied.
- Monitor your website for unusual activity and ensure regular backups are in place.
5. Ask your IT provider
Can you confirm if our WordPress site uses the Bricksforge plugin, and if so, has it been updated to fix the CVE-2026-85097 vulnerability?
6. Bottom line
Update the Bricksforge plugin on your WordPress site now to prevent hackers from taking control of your website.
Information based on CISA KEV, NVD, and reputable security news reports.