Input validation vulnerability in Bricks 1.8.1

The Bricks theme for WordPress has a security issue in versions 1.8.1 and below. This is because the ‘save_settings’ function does not properly check for a specific code (called nonce). This means that hackers can make changes to the theme’s settings without authentication. This could potentially give them access to perform code execution, which is dangerous. They can do this by tricking a site administrator into clicking on a link.