{"id":9182,"date":"2025-07-29T00:41:14","date_gmt":"2025-07-29T00:41:14","guid":{"rendered":"http:\/\/localhost\/?p=9182"},"modified":"2025-07-29T00:41:14","modified_gmt":"2025-07-29T00:41:14","slug":"bricks-builder-1124-unauthenticated-sql-injection-via-p-parameter","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=9182","title":{"rendered":"Bricks Builder <= 1.12.4 - Unauthenticated SQL Injection via `p` Parameter"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nBricks Builder <= 1.12.4 - Unauthenticated SQL Injection via `p` Parameter<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-07-29T04:23:44.765Z<\/td>\n<\/tr>\n
Modified<\/th>\n2025-07-29T04:23:44.765Z<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nBricks Builder<\/td>\n<\/tr>\n
Product<\/th>\nBricks<\/td>\n<\/tr>\n
Version<\/th>\n*<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n
Base Score<\/th>\n7.5 (HIGH)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:N\/A:N<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n\n
AI Description<\/th>\nThe Bricks WordPress theme is vulnerable to SQL Injection via the ‘p’ parameter, allowing unauthenticated attackers to extract sensitive data. This affects versions up to 1.12.4 due to insufficient input escaping and SQL query preparation.<\/td>\n<\/tr>\n
AI Severity<\/th>\nHigh<\/td>\n<\/tr>\n
AI Vendor<\/th>\nBricks Builder<\/td>\n<\/tr>\n
AI Product<\/th>\nBricks<\/td>\n<\/tr>\n
AI Version<\/th>\n1.12.4<\/td>\n<\/tr>\n
AI Score<\/th>\n7.5<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n