CVE-2026-118804 | Bricks Builder Plugin up to 2.4.3 REST Endpoint query_result originalQueryVars access control

October 29, 2026 Yanac

A vulnerability was found in Bricks Builder Plugin up to 2.4.3. It has been classified as problematic. This issue affects some unknown processing of the file /wp-json/bricks/v1/query_result of the component REST Endpoint. Performing a manipulation of the argument originalQueryVars results in improper access controls.

This vulnerability was named CVE-2026-118804. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More