Oct 132026 Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE Bricksforge’s CVE-2026–85097 is under active exploitation and allows unauthenticated PHP execution on affected WordPress sites.