Bricksforge WordPress Plugin CVE-2026-85097 Actively Exploited

A vulnerability in the Bricksforge WordPress plugin, CVE-2026-85097, is being actively exploited in the wild, allowing attackers to take control of targeted websites. The specific attack vector and scope of compromise remain unclear, but the active exploitation indicates a credible threat to sites running the plugin. This matters as WordPress powers a significant portion of the web, and plugin vulnerabilities are a common entry point for mass compromise.