CVE WATCH / VULNERABILITY DETAIL
CVE-2026-119325
HIGHCVSS 7.5NVD feed
Published 29 October 2026 · tracked since 30 October 2026
Description
Bricks Theme 2.4 and before for WordPress contains an unauthenticated broken access control vulnerability in the load_popup_content REST endpoint that allows anonymous attackers to read draft and unpublished page content by supplying a popupId parameter without any status or capability checks. Attac
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-16760 HIGH 8.8
- CVE-2026-118938 HIGH 8.8
- CVE-2026-111578 HIGH 7.5
- CVE-2026-62990 HIGH 8.7
- CVE-2026-62989 HIGH 8.1
- CVE-2026-62864 HIGH 7.5
- CVE-2026-62958 HIGH 7.9
- CVE-2026-62297 HIGH 7.5
- CVE-2026-62847 HIGH 8.2
- CVE-2026-58412 HIGH 8.2