{"uuid": "00fa0227-64df-4e00-b6af-5835cf271eae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-25600", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_bricks_builder_rce.rb", "content": "{\"aliases\": [], \"arch\": \"php, cmd\", \"author\": [\"Calvin Alkan\", \"Valentin Lobstein\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated remote code execution vulnerability in the\\n          Bricks Builder Theme versions <= 1.9.6 for WordPress. The vulnerability allows attackers\\n          to execute arbitrary PHP code by leveraging a nonce leakage to bypass authentication and\\n          exploit the eval() function usage within the theme. Successful exploitation allows for full\\n          control of the affected WordPress site. It is recommended to upgrade to version 1.9.6.1 or higher.\", \"disclosure_date\": \"2024-02-19\", \"fullname\": \"exploit/multi/http/wp_bricks_builder_rce\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:04 +0000\", \"name\": \"Unauthenticated RCE in Bricks Builder Theme\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/wp_bricks_builder_rce.rb\", \"platform\": \"Linux,PHP,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/wp_bricks_builder_rce\", \"references\": [\"CVE-2024-25600\", \"URL-https://github.com/Chocapikk/CVE-2024-25600\", \"URL-https://snicco.io/vulnerability-disclosure/bricks/unauthenticated-rce-in-bricks-1-9-6\", \"WPVDB-afea4f8c-4d45-4cc0-8eb7-6fa6748158bd\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\", \"PHP In-Memory\", \"Unix In-Memory\", \"Windows In-Memory\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:20.992125Z"}