•SiTech AI Team
Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw for Unauthenticated RCE
Attackers are actively exploiting CVE-2026-85097, a maximum-severity flaw in the Bricksforge WordPress plugin, to achieve unauthenticated remote code execution. Patchstack detected attacks on October 7, 2026.