AIKIDO-2026-397534
Bricksforge is vulnerable to Unrestricted File Upload
98
Critical Risk
This Affects:
BricksforgeTL;DR
handle_temporary_file_uploads in Pro Forms uses the client-supplied url from a temporaryFileUploads entry when it stores a file that already passed the temporary upload MIME check. An unauthenticated visitor can name a destination the MIME check never applied to, so the accepted file is written where the web server will execute it. The fix accepts a temporary upload only when its path stays inside the Pro Forms temp directory and its extension is one WordPress allows.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and Pro Forms is active.
Background info
Bricksforge is vulnerable to Unrestricted File Upload in versions 0.9.6 - 3.1.8.9.
How to fix this
Upgrade the Bricksforge library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.