Reflected XSS Vulnerability in Bricks Builder by Bricksy
CVE-2026-41554

7.1HIGH

Key Information:

Vendor

WordPress
Status
Bricks Builder
Vendor
CVE Published:
7 May 2026

What is CVE-2026-41554?

A reflected Cross-site Scripting (XSS) vulnerability in Bricks Builder allows attackers to inject malicious scripts into web page generation. This threat could lead to unauthorized actions being executed on behalf of users when they visit a compromised page. The vulnerability affects Bricks Builder versions from n/a up to 2.2, emphasizing the importance of keeping your plugins updated to ensure robust security against XSS attacks.

Affected Version(s)

Bricks Builder 1.9.2 <= 2.2

References

https://patchstack.com/database/wordpress/theme/bricks/vu...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

w41bu1 | Patchstack Bug Bounty Program
.