Exploited In The Wild

CVE-2026-85097 is a maximum-severity (CVSS 10.0) unauthenticated arbitrary-file-upload flaw in Bricksforge, a popular add-on for the Bricks WordPress builder, that leads to remote code execution. It is being exploited in the wild from October 7, 2026. Here is exactly how the attack works, why patching alone is not enough, and the defender’s checklist — patch to the latest release, hunt the indicators of compromise, and assume exposed sites may already be breached.