Attackers Exploit CVSS 100 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

A maximumseverity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild according to Patchstack The critical vulnerability in question is CVE202685097 CVSS score 100 which allows unauthenticated attackers to upload and execute arbitrary PHP code on vulnerable WordPress websites resulting in remote code execution RCE The