Unauthenticated Dynamic Data Tag Injection in Bricks Theme by Bricks Builder

CVE-2026-118803

What is CVE-2026-118803?

The Bricks Theme versions up to 2.4.3 are susceptible to an unauthenticated dynamic-data tag injection vulnerability. This flaw enables unauthenticated attackers to manipulate the urlParams object in the query_result REST endpoint. As a result, attackers can inject dangerous tags, such as author_meta:user_pass, author_meta:user_email, and cf_coupon_amount. Exploiting this vulnerability allows them to extract sensitive information, including post metadata and the author's user record, leading to potential exposure of password hashes without the need for authentication.

References