CVE-2026-119325 | Bricks Theme Plugin up to 2.4.0 Popup Content load_popup_content popupId access control

October 29, 2026 Yanac

A vulnerability was found in Bricks Theme Plugin up to 2.4.0. It has been rated as problematic. This affects an unknown part of the file /wp-json/bricks/v1/load_popup_content of the component Popup Content. The manipulation of the argument popupId leads to improper access controls.

This vulnerability is documented as CVE-2026-119325. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More