Blind SQL Injection Vulnerability in Bricks Theme for WordPress

CVE-2025-6495

What is CVE-2025-6495?

The Bricks theme for WordPress is exposed to a blind SQL injection vulnerability through the 'p' parameter. All versions up to and including 1.12.4 are affected due to insufficient escaping of user-supplied input and inadequate preparation of the SQL query. This vulnerability enables unauthenticated attackers to manipulate existing SQL queries by injecting additional SQL commands. Such actions can lead to unauthorized access to sensitive data stored in the database, presenting significant security risks to websites utilizing this theme.

References