CVE-2026-119325 Details
Description
Bricks Theme 2.4 and before for WordPress contains an unauthenticated broken access control vulnerability in the load_popup_content REST endpoint that allows anonymous attackers to read draft and unpublished page content by supplying a popupId parameter without any status or capability checks. Attackers can obtain a public nonce via the bricks_regenerate_query_nonce action and then increment the popupId value in requests to the /wp-json/bricks/v1/load_popup_content endpoint to enumerate and disclose confidential content from any unpublished post on the site.
A broken access control vulnerability has been identified in the Bricks Theme for WordPress, versions 2.4 and prior. This vulnerability allows unauthenticated, anonymous attackers to access draft and unpublished page content through the load_popup_content REST endpoint. The issue arises because the popupId parameter can be manipulated without any status or capability checks. Attackers can first obtain a public nonce via the bricks_regenerate_query_nonce action, and then use this nonce to increment the popupId value in requests to the load_popup_content endpoint. This process enables them to enumerate and access confidential content from any unpublished post on the site.
Users are advised to update to Bricks Theme version 2.4.1 or later, where this vulnerability has been addressed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 29, 2026CISA-ADP
Assessed Oct 30, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://bricksbuilder.io/release/bricks-2-4-1/ | [email protected] | Release NotesVendor |
| https://www.vulncheck.com/advisories/bricks-theme-broken-access-control-via-load-popup-content | [email protected] | Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-639 | Authorization Bypass Through User-Controlled Key | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Bricks Theme | < 2.4.1 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 30, 2026 | CVE Modified | CISA-ADP |
| Oct 29, 2026 | New CVE Received | [email protected] |