WORDPRESS BRICKS THEME UNDER ACTIVE ATTACK: CRITICAL FLAW IMPACTS 25,000+ SITES

Summary from the TLDR InfoSec newsletter

The Bricks WordPress theme has a critical RCE flaw (CVE-2024-25600, 9.8 CVSS) that is actively being exploited. It impacts Bricks v1.9.6 and below, allowing PHP code execution by unauthenticated attackers.