CVE-2022-3400: Bricksbuilder Bricks

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

The Bricks theme for WordPress is vulnerable to authorization bypass due to a missing capability check on the bricks_save_post AJAX action in versions 1.0 to 1.5.3. This makes it possible for authenticated attackers with minimal permissions, such as a subscriber, to edit any page, post, or template on the vulnerable WordPress website.

Affected products

• Bricksbuilder Bricks: from 1.0, up to and including 1.5.3

Published 2022-10-28. Last modified 2026-06-17.