CVE-2026-85097 is a critical unauthenticated arbitrary file upload vulnerability in the Bricksforge plugin for WordPress, disclosed by Patchstack on October 8, 2026 with a CVSS score of 10.0, and the window between public exposure and active exploitation has already collapsed to zero because Patchstack telemetry recorded the first exploitation attempts at 21:47 UTC on October […] The post CVE-2026-85097: What the Bricksforge WordPress Exploitation Means for Your Business appeared first on CybelAngel .