CVE-2026-118803 | Bricks Plugin up to 2.4.3 Query Result Endpoint urlParams weak password hash

October 29, 2026 Yanac

A vulnerability described as problematic has been identified in Bricks Plugin up to 2.4.3. Affected by this vulnerability is an unknown functionality of the component Query Result Endpoint. Executing a manipulation of the argument urlParams can lead to password hash with insufficient computational effort.

This vulnerability is registered as CVE-2026-118803. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More