PT-2026-50080 · Utillz+1 · Brikk
CVE-2025-69103
·
Published
2026-05-26
·
Updated
2026-06-17
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Brikk versions prior to 3.0.1
Description
The Brikk - Directory & Listing WordPress Theme contains a flaw allowing authenticated attackers with Subscriber-level access and above to delete arbitrary content. This occurs due to a missing capability check within a function, which fails to verify if the user has the necessary permissions to perform the deletion action.
Recommendations
Update Brikk to a version newer than 3.0.0.
Fix
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Brikk