shouldiuse.io

New check

Categories

VERDICT

Should I use Bricks Builder?

An innovative, community-driven, visual site builder for WordPress — design unique, performant, scalable websites. Code-free. - bricksbuilder.io

Depends. Buy if you're a freelancer, agency, or hands-on site owner who values performance and will keep the theme updated. Avoid if you're a non-technical beginner or need enterprise-grade security assurances.

Confidence

Medium. Based on 11 relevant public sources; unrelated 'bricks' results (LEGO, construction grants) excluded. Review ratings unusable — G2/Trustpilot results matched different products.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support qualityActive forum exists, but no direct support evidence
  • Security posture

Pricing

$79

1 site

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierNo

Best for

  • Freelancers building client WordPress sites
  • Performance-focused DIY site owners
  • Agencies wanting code-free custom design
  • WordPress users comfortable with updates and CSS

Not for

  • Non-technical beginners wanting one-click websites
  • Simple one-page sites — overkill; use the block editor
  • Enterprises needing SOC 2 / vendor security compliance
  • Anyone who won't apply theme updates promptly

Gotchas - check before you buy

high

Patch immediately: unauthenticated RCE (≤1.9.6) was exploited in the wild before the vendor fix.

medium

Guess: Bricks-built pages are theme-locked; switching builders likely means rebuilding.

low

No dedicated security page found on the vendor's own site.

low

License confusion on Reddit: the lifetime deal (LTD) is optional, not mandatory.

Pros and cons

Pros

  • Priced at $79 for a one-site license — cheap versus rivals
  • Users on Reddit rate it 'amazing'; strong community-driven development
  • Independent reviewers praise its performance and reputation
  • Official docs include incident-recovery guidance after the RCE

Cons

  • Critical unauthenticated RCE (CVE-2024-25600) affected versions up to 1.9.6
  • Attackers exploited it in the wild; real sites were hacked
  • Reddit newcomers flag a learning curve
  • One reviewer flags a 'BIG problem' with pages you build

Sources & method

Analyzed 9/20/2026 - 11 sources - One critical unauthenticated RCE (CVE-2024-25600, ≤1.9.6) was exploited to hack real sites; vendor patched, and a second 2024 CVE is listed in NVD.

official x2review x5security x4
  • CVE-2024-25600 — Unauthenticated Remote Code Execution, Code injection flaw in Bricks ≤1.9.6; attackers exploited it to compromise WordPress sites. Patched by the vendor.
  • CVE-2024-2297, NVD lists a 2024 vulnerability affecting the Bricks theme; details truncated in the reviewed source.

Key stats

  • Value for money: 4/5

    Rating

  • $79

    Starting price

  • 11

    Sources

  • Analyzed

  • Value for money: 4/5. $79 one-site license undercuts most rivals
  • Ease of use: 3/5. Powerful, but Reddit cites a real learning curve
  • Feature depth: 4/5. Users praise dynamic data; community-driven development
  • Support quality. Active forum exists, but no direct support evidence
  • Security posture: 2/5. Critical actively exploited RCE in 2024; since patched
  • $79 Starting price one-site license
  • No Free tier paid license required
  • 2 2024 CVEs listed incl. actively exploited unauthenticated RCE

Pricing

1 site

$79

  • Full visual builder on one WordPress site
  • Community-driven updates

Security

One critical unauthenticated RCE (CVE-2024-25600, ≤1.9.6) was exploited to hack real sites; vendor patched, and a second 2024 CVE is listed in NVD.

  • CVE-2024-25600 — Unauthenticated Remote Code ExecutionCode injection flaw in Bricks ≤1.9.6; attackers exploited it to compromise WordPress sites. Patched by the vendor.⁶
  • CVE-2024-2297NVD lists a 2024 vulnerability affecting the Bricks theme; details truncated in the reviewed source.⁹

What users say

Reddit and independent reviewers praise Bricks' capabilities and performance while debating its learning curve and licensing.

“Bricks is amazing with d…”
Reddit, r/Wordpress
“LTD is not mandatory, yo”
Reddit, r/Wordpress
Full analysis

Based on 11 relevant public sources; unrelated 'bricks' results (LEGO, construction grants) excluded. Review ratings unusable — G2/Trustpilot results matched different products.

Capable, cheap WordPress builder users rave about — but patch fast: a 2024 unauthenticated RCE got real sites hacked.

Methodology

Based on 11 relevant public sources; unrelated 'bricks' results (LEGO, construction grants) excluded. Review ratings unusable — G2/Trustpilot results matched different products.

Sources

  1. Is Bricks Builder really that good, or is it just a Reddit hype?reddit.com
    review
  2. Bricks worth it? Learning curve? — r/Wordpressreddit.com
    review
  3. Bricks Builder Review WordPress (The BIG Problem…)wagepirate.com
    review
  4. Bricks Builder Review: Pricing, Performance, Trade-Offsfatlabwebsupport.com
    review
  5. Bricks Builder vs. Elementor (pricing)crocoblock.com
    review
  6. Bricks <= 1.9.6 Unauthenticated RCE — Wordfencewordfence.com
    security
  7. Websites Hacked via Bricks Builder Vulnerability — SecurityWeeksecurityweek.com
    security
  8. Critical RCE Patched in Bricks Builder Theme — Patchstackpatchstack.com
    security
  9. CVE-2024-2297 — NVDnvd.nist.gov
    security
  10. Recovering a compromised Bricks site — official academyacademy.bricksbuilder.io
    official
  11. Bricks Builder homepagebricksbuilder.io
    official

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.