CVE-2026-40723
Deferred Deferred - Pending Action
Subscriber Broken Access Control in Bricks Builder

Publication date: 2026-06-17

Last updated on: 2026-06-17

Assigner: Patchstack

Description
Subscriber Broken Access Control in Bricks Builder <= 2.1.4 versions.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-17
Last Modified
2026-06-17
Generated
2026-06-17
AI Q&A
2026-06-17
EPSS Evaluated
N/A
NVD
CVE-2026-40723
EUVD
EUVD-2026-37592
Affected Vendors & Products
Showing 3 associated CPEs
Vendor Product Version / Range
bricks_builder bricks_builder to 2.1.4 (inc)
patchstack bricks_builder to 2.2 (exc)
patchstack bricks_builder From 2.2 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

The vulnerability in Bricks Builder Theme versions 2.1.4 and below is a Broken Access Control issue. It allows unprivileged users to perform actions that normally require higher privileges because of missing authorization, authentication, or nonce token checks.

This means that users without proper permissions can bypass security controls and execute actions they should not be allowed to, potentially compromising the integrity of the system.

Impact Analysis

This vulnerability can allow users with limited privileges to perform higher-privileged actions, which may lead to unauthorized changes or modifications within the Bricks Builder environment.

Although the severity is classified as low and exploitation is unlikely, it still poses a risk of unauthorized access or manipulation that could affect the security and stability of your website.

Mitigation Strategies

The immediate step to mitigate this vulnerability is to update the WordPress Bricks Builder Theme to version 2.2 or later.

If updating immediately is not possible, users should seek assistance from their hosting provider or developer to address the issue.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-40723. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart