CVE-2024-25600 – WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability

https://notcve.org/view.php?id=CVE-2024-25600

Improper Control of Generation of Code ('Code Injection') vulnerability in Codeer Limited Bricks Builder allows Code Injection.This issue affects Bricks Builder: from n/a through 1.9.6. La vulnerabilidad de control inadecuado de la generación de código ("inyección de código") en Codeer Limited Bricks Builder permite la inyección de código. Este problema afecta a Bricks Builder: desde n/a hasta 1.9.6. The Bricks theme for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.9.6. This makes it possible for unauthenticated attackers to execute code on the server. • https://github.com/K3ysTr0K3R/CVE-2024-25600-EXPLOIT https://github.com/gobysec/GobyVuls https://github.com/gobysec/Goby https://github.com/hy011121/CVE-2024-25600-wordpress-Exploit-RCE https://github.com/ivanbg2004/0BL1V10N-CVE-2024-25600-Bricks-Builder-plugin-for-WordPress https://github.com/Tornad0007/CVE-2024-25600-Bricks-Builder-plugin-for-WordPress https://github.com/X-Projetion/WORDPRESS-CVE-2024-25600-EXPLOIT-RCE https://github.com/Chocapikk/CVE-2024-25600 https://github.com/wh6amiGit • CWE-94: Improper Control of Generation of Code ('Code Injection') •