CVE-2024-2297 - Bricksbuilder <= 1.9.6.1 - Authenticated (Contributor+) Privilege Escalation via create_autosave

Back Back to CVE browser

HIGH

Bricksbuilder <= 1.9.6.1 - Authenticated (Contributor+) Privilege Escalation via create_autosave

Published Feb 27, 2025

8.8

HIGH

CVSS 3.1

EPSS 0.36%

Description

The Bricks theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.6.1. This is due to insufficient validation checks placed on the create_autosave AJAX function. This makes it possible for authenticated attackers, with contributor-level access and above, to execute arbitrary PHP code with elevated (administrator-level) privileges. NOTE: Successful exploitation requires (1) the Bricks Builder to be enabled for posts (2) Builder access to be enabled for contributor-level users, and (3) "Code Execution" to be enabled for administrator-level users within the theme's settings.

Affected products

Vendor Bricks Builder Product Bricks Default
unaffected
- Version
  -
  Status
  affected
  Constraints
  <=1.9.6.1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Bricks Builder

Bricks

unaffected

Version	Status	Constraints
-	affected	<=1.9.6.1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-269

Improper Privilege Management

References (2)

https://bricksbuilder.io/release/bricks-1-9-7/
Release Notes
https://www.wordfence.com/threat-intel/vulnerabilities/id/cb075e85-75fc-4008-8270-4d1064ace29e?source=cve
Third Party Advisory

Link	Providers	Tags
https://bricksbuilder.io/release/bricks-1-9-7/		Release Notes
https://www.wordfence.com/threat-intel/vulnerabilities/id/cb075e85-75fc-4008-8270-4d1064ace29e?source=cve		Third Party Advisory