Active Exploitation of Critical Bricksforge WordPress Plugin Vulnerability

The Bricksforge plugin for WordPress faces active in-the-wild exploitation due to a maximum-severity flaw. CVE-2026-85097 (CVSS 10.0) permits…

If your site uses Bricksforge, immediately deactivate and remove the plugin as an emergency measure. Check your WordPress admin panel for its presence, and audit access logs for suspicious activity or unauthorized file modifications. Await a security update from the plugin developers.