Bricks

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. The Bricks theme for WordPress is vulnerable to remote code execution due to the theme allowing site editors to include executable code blocks in website content in versions 1.2 t…CVE-2022-3401Bricks Builder · CVSS 8.8 · 2.2% likely

   CWE-94

2. The Bricks theme for WordPress is vulnerable to authorization bypass due to a missing capability check on the bricks_save_post AJAX action in versions 1.0 to 1.5.3. This makes it…CVE-2022-3400Bricks Builder · CVSS 6.5 · 0.7% likely

   CWE-862

3. Bricks Builder <= 1.12.4 - Unauthenticated SQL Injection via `p` ParameterCVE-2025-6495Bricks Builder · CVSS 7.5 · 0.5% likely

   CWE-89

4. Bricksbuilder <= 1.9.6.1 - Authenticated (Contributor+) Privilege Escalation via create_autosaveCVE-2024-2297Bricks Builder · CVSS 7.1 · 0.4% likely

   CWE-269

5. Bricks <= 1.10.1 - Authenticated (Bricks Page Builder Access+) Stored Cross-Site ScriptingCVE-2023-3410Bricks Builder · CVSS 5.4 · 0.3% likely

   CWE-79

6. Bricks <= 1.8.1 - Cross-Site Request Forgery via save_settingsCVE-2023-3408Bricks Builder · CVSS 4.3 · 0.2% likely

   CWE-352

7. Bricks <= 1.8.1 - Cross-Site Request Forgery via reset_settingsCVE-2023-3409Bricks Builder · CVSS 5.4 · 0.2% likely

   CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.