The Bricks Builder WordPress theme contains an improper privilege management vulnerability (CWE-269) due to inadequate validation in the create_autosave AJAX function. This flaw permits authenticated users with contributor-level permissions or above to escalate their privileges to administrator level by executing arbitrary PHP code. Successful exploitation depends on specific configuration settings within the theme, including enabling the builder for posts, granting builder access to contributors, and enabling code execution for administrators. The vulnerability is present in all versions up to and including 1.9.6.1. The CVSS 3.1 base score is 7.1 (High), reflecting network attack vector, high complexity, low privileges required, user interaction needed, and high impact on confidentiality, integrity, and availability.

An authenticated user with contributor-level access or higher can exploit this vulnerability to execute arbitrary PHP code with administrator privileges, potentially leading to full site compromise. This could allow the attacker to modify site content, install malicious plugins, or take over the WordPress installation. The impact affects confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, administrators should review and restrict the configuration settings that enable builder access for contributor-level users and code execution for administrators. Limiting contributor permissions and disabling unnecessary builder features can reduce the attack surface. Monitor official Bricks Builder communications for updates and apply patches promptly once released.