CVE-2024-25600
WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability
CRITICAL 10.0EPSS 88.2%
Improper Control of Generation of Code ('Code Injection') vulnerability in Codeer Limited Bricks Builder allows Code Injection.This issue affects Bricks Builder: from n/a through 1.9.6.
- Affected
- Codeer Limited · Bricks Builder
- CVSS v3.1 PATCHSTACK
- 10.0 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - EPSS
- 88.23% chance of exploitation in the next 30 days, 100th percentile
- Nuclei
- critical
- Published
- 2024-06-04
- Updated
- 2026-04-28
Proof-of-concept exploits (21)
- Chocapikk/CVE-2024-25600183★ · 2024-02-25
- K3ysTr0K3R/CVE-2024-25600-EXPLOIT
- KaSooMi0228/CVE-2024-25600-Bricks-Builder-WordPress0★ · 2024-07-30
- NanoWraith/CVE-2024-256000★ · 2024-06-06
- Sibul-Dan-Glokta/test-task-CVE-2024-256000★ · 2025-01-26
- Tornad0007/CVE-2024-25600-Bricks-Builder-plugin-for-WordPress8★ · 2024-02-22
- WanLiChangChengWanLiChang/CVE-2024-256000★ · 2024-06-07
- X-Projetion/WORDPRESS-CVE-2024-25600-EXPLOIT-RCE1★ · 2024-04-20
- binary-lover/TryHack3M--Bricks-Heist0★ · 2025-07-02
- ivanbg2004/ODH-BricksBuilder-CVE-2024-25600-THM0★ · 2025-04-09
- k3lpi3b4nsh33/CVE-2024-256000★ · 2024-06-06
- r0otk3r/CVE-2024-256000★ · 2025-07-12
- svchostmm/CVE-2024-25600-mass0★ · 2024-05-05
- wh6amiGit/CVE-2024-256000★ · 2024-08-20
- CerberusMrXi/WP-Bricks-Exploit-CVE-2024-256001★ · 2026-07-16
- estebanzarate/CVE-2024-25600-WordPress-Bricks-Builder-RCE-PoC1★ · 2026-02-19
- ranjithxploit/CVE-2024-256000★ · 2025-11-28
- GMJayy/wp-cve-poc4★ · 2026-08-27
- so1icitx/CVE-2024-2560013★ · 2026-09-13
- w0rmgh4d/Wordpress---Auto-Exploit0★ · 2026-10-05
- K52-ai/CVE-2024-25600
Nuclei templates (1)
Metasploit modules (1)
ExploitDB entries (1)
Exploit collections (1)
- CVE-2024-25600.yamlzan8in/afrog