Remote Code Execution Vulnerability in Bricks Theme for WordPress

CVE-2022-3401

What is CVE-2022-3401?

The Bricks theme for WordPress presents a risk of remote code execution due to its functionality allowing site editors to embed executable code blocks directly in website content. This vulnerability affects versions 1.2 through 1.5.3 and can be exploited by authenticated attackers with minimal permissions, such as subscribers. These individuals can manipulate any page, post, or template on the vulnerable site, enabling them to inject code execution blocks that could lead to significant security breaches.

References