Unauthenticated Broken Access Control in Bricks Theme for WordPress
CVE-2026-119325

7.5HIGH

Key Information:

Vendor

WordPress
Status
Bricks Theme
Vendor
CVE Published:
29 October 2026

What is CVE-2026-119325?

The Bricks Theme for WordPress versions prior to 2.4 reveals a serious vulnerability within its load_popup_content REST endpoint. This flaw enables unauthenticated attackers to read draft and unpublished content by manipulating the popupId parameter without proper validation or authorization checks. By leveraging a public nonce obtained through the bricks_regenerate_query_nonce action, attackers can exploit this weakness, incrementing the popupId to expose sensitive unpublished posts on the site, significantly compromising site confidentiality.

Affected Version(s)

Bricks Theme 0 < 2.4.1

References

https://bricksbuilder.io/release/bricks-2-4-1/
release-notes
https://www.vulncheck.com/advisories/bricks-theme-broken-...
third-party-advisory

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.