CVE-2024-25600

Published Jun 4, 2024

Last updated 7 months ago

CVSS critical 10.0
WordPress
Bricks Builder

Overview

AI description

Automated description summarized from trusted sources.

CVE-2024-25600 is a Remote Code Execution (RCE) vulnerability affecting the Bricks Builder plugin for WordPress. This vulnerability exists in versions up to and including 1.9.6. The vulnerability stems from improper handling of user input within the Bricks Builder plugin, which allows unauthenticated attackers to inject and execute arbitrary PHP code remotely on the server. Exploitation could lead to full site compromise, data theft, and potential malware distribution. A patch addressing this vulnerability has been released in Bricks Builder plugin version 1.9.6.1 or higher.

Description
Improper Control of Generation of Code ('Code Injection') vulnerability in Codeer Limited Bricks Builder allows Code Injection.This issue affects Bricks Builder: from n/a through 1.9.6.
Source
audit@patchstack.com
NVD status
Deferred

Risk scores

CVSS 3.1

Type
Secondary
Base score
10
Impact score
6
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Severity
CRITICAL

Weaknesses

audit@patchstack.com
CWE-94

Social media

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score

9

  1. ExploitGrid Daily Digest 🚨 Top Exploits: CVE-2024-25600 (CVSS: 10) CVE-2025-32433 (CVSS: 10) erlang CVE-2025-55182 (CVSS: 10) Meta CVE-2026-58115 (CVSS: 10) Siemens CVE-2026-97229 (CVSS: 10) gitlab ..🧵👇

    @exploitgrid

    5 Nov 2026

    5418 Impressions

    3 Retweets

    30 Likes

    27 Bookmarks

    1 Reply

    0 Quotes

  2. ExploitGrid Daily Digest 🚨 Top Exploits: CVE-2021-44228 (CVSS: 10) Apache Softw... CVE-2024-25600 (CVSS: 10) CVE-2025-32440 (CVSS: 10) jokob-sk CVE-2026-102255 (CVSS: 10) sonicwall CVE-2026-102785 (CVSS: 10) https://t.co/IpdRu5AimX ..🧵👇

    @exploitgrid

    26 Oct 2026

    131 Impressions

    0 Retweets

    2 Likes

    0 Bookmarks

    2 Replies

    0 Quotes

  3. #ExploitGrid Daily Digest 🚨 Top Exploits: CVE-2024-25600 (CVSS: 10) CVE-2026-103849 (CVSS: 10) Adobe CVE-2026-61732 (CVSS: 10) BitterSecurity CVE-2025-49113 (CVSS: 9.9) roundcube CVE-2026-105697, CVE-2026-107824, CVE-2026-104120 (CVSS: 8.7) langflow-ai ..🧵👇

    @exploitgrid

    20 Oct 2026

    95 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    1 Reply

    0 Quotes

  4. Just rooted TryHack3M: Bricks Heist 🧱 CVE-2024-25600 RCE → hidden flag → rogue ubuntu.service #TryHackMe #BricksHeist #DFIR #Crypto I just earned the 3 Million Legend on TryHackMe! https://t.co/J4PMHGSthU

    @BathoOkoro

    2 Oct 2026

    20 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  5. 🛡️ #ExploitGrid Daily #Threat Digest Critical Exploits disclosed today: CVE-2023-22527 CVE-2023-22518 CVE-2023-46604 CVE-2024-25600 CVE-2023-41892 ..🧵👇

    @exploitgrid

    24 Aug 2026

    33 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    1 Reply

    0 Quotes

  6. Rooted TryHack3M: Bricks Heist 🧱🔓 WordPress Bricks theme RCE (CVE-2024-25600) → shell → hunted a disguised cryptominer hiding behind a fake systemd service → decoded an obfuscated wallet → traced it to LockBit Forensics > exploitation on this one. #TryHackMe #C

    @CoreSec_Group

    29 Jul 2026

    72 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  7. WordPressテーマ「Bricks」の悪用が進行：2万5千超のサイトが脆弱（CVE-2024-25600） | Codebook｜Security News https://t.co/P9sZ2oenF1

    @akibablog

    22 Jun 2025

    2580 Impressions

    3 Retweets

    2 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  8. [ Tool ] - Mass CVE-2024-25600 🚨 Bricks <= 1.9.6 💚 https://t.co/N1fU0rNrbL

    @crypter66921

    11 Apr 2025

    10 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  9. 🚨 Hackers are abusing WordPress mu-plugins a hidden auto-run directory to inject malware, hijack links, and redirect users to scam sites. Also, add these to the list of 2024's major WordPress threats: CVE-2024-27956 | SQL injection CVE-2024-25600 | RCE in Bricks theme https://t

    @achi_tech

    3 Apr 2025

    38 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  10. CVE-2024-25600 : Exploit WordPress Bricks Builder Remote Code Execution https://t.co/mItUbLoeCS

    @_iTs_sUb_

    3 Apr 2025

    2 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  11. 🚨 Hackers are abusing WordPress mu-plugins—a hidden auto-run directory—to inject malware, hijack links, and redirect users to scam sites. Also, add these to the list of 2024's major WordPress threats: CVE-2024-27956 | SQL injection CVE-2024-25600 | RCE in Bricks theme https://t

    @TheHackersNews

    31 Mar 2025

    13318 Impressions

    59 Retweets

    106 Likes

    19 Bookmarks

    1 Reply

    2 Quotes

  12. GitHub - so1icitx/CVE-2024-25600: CVE-2024-25600 exploit (python 3) https://t.co/Jl56Y0UZ1q

    @akaclandestine

    31 Mar 2025

    1894 Impressions

    4 Retweets

    19 Likes

    4 Bookmarks

    0 Replies

    0 Quotes

  13. 🚨 ¡ALERTA DE SEGURIDAD! 🚨 Se ha descubierto una vulnerabilidad crítica en Docusnap (CVE-2024-25600) que podría comprometer sistemas empresariales. Si usas esta herramienta, ¡esto te interesa! 🔍👇 #Ciberseguridad #Docusnap - https://t.co/STekZUWRnE https://t.co/nZHupxmYfU

    @MRNEWSEC_

    4 Mar 2025

    10 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    1 Reply

    0 Quotes

  14. 1:05 AM Friday Night!!! Looking into CVE-2024-25600-EXPLOIT This is what passion and hard work is. And I am addicted F**k Yeah!!! Thank you @hackthebox_eu and @RealTryHackMe #WordPress

    @censoredHacker

    8 Feb 2025

    16 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

Related CVEs

  1. The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.16.2 via the 'xpv_image' parameter parameter. This is due to missing authentication and nonce checks on the wp_loaded handler combined with no sanitization of the xpv_image POST parameter before it is echoed unescaped into a Dompdf-rendered HTML template with PHP execution enabled. This makes it possible for unauthenticated attackers to execute code on the server. The only nonce and authentication check in the handler is entirely enclosed in a block comment with no replacement, making the endpoint reachable via a single unauthenticated POST to any URL on the site.•CVE-2026-103889
  2. The Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.3. This is due to the plugin accepting an attacker-controlled afreg_select_user_role value from the unauthenticated WooCommerce Store API /wc/store/v1/checkout request in the af_reg_checkout_data_to_order_meta_data_block() function, persisting it in order meta, and then passing it directly to WP_User::add_role() in the af_reg_custom_order_processing_function() function (hooked to woocommerce_thankyou) without validating against the plugin's admin-configured allowed role list. This makes it possible for unauthenticated attackers to elevate their privileges to Administrator by creating an account during checkout with a modified JSON body specifying administrator (or any other role slug) as the desired role. Note: The exploit requires the "User Role Selection" setting to be enabled.•CVE-2026-15369
  3. Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.•CVE-2026-74943
  4. The User Profile Builder plugin for WordPress is vulnerable to Authentication Bypass via Type Confusion in versions up to, and including, 3.16.4. This is due to the wppb_log_in_user() function calling absint() on the return value of wp_insert_user() before performing an is_wp_error() check — when a registration is submitted with a 61–70 character username, WordPress core rejects it with a WP_Error object, but absint() coerces that object to the integer 1 before the error check can short-circuit execution, causing the plugin to bind and return a transient-backed autologin nonce tied to user ID 1. This makes it possible for unauthenticated attackers to log in as the site's Administrator account (user ID 1), resulting in full administrative takeover of the site.•CVE-2026-15826
  5. WordPress Core Interpretation Conflict Vulnerability•CVE-2026-63030

References

Sources include official advisories and independent security research.