CVE-2025-27007

🗓️ 01 May 2025 10:54:56Reported by PatchstackType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 146 Views

Incorrect Privilege Assignment in Brainstorm Force SureTriggers allows Privilege Escalation vulnerability.

Reporter	Title	Published	Views	Family All 18
Circl	CVE-2025-27007	1 May 202511:14	–	circl
CNNVD	WordPress plugin SureTriggers 安全漏洞	1 May 202500:00	–	cnnvd
Cvelist	CVE-2025-27007 WordPress SureTriggers <= 1.0.82 - Privilege Escalation Vulnerability	1 May 202510:54	–	cvelist
Exploit DB	SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation	9 May 202500:00	–	exploitdb
Metasploit	WordPress SureTriggers (aka OttoKit) Combined Auth Bypass (CVE-2025-3102, CVE-2025-27007)	13 May 202518:49	–	metasploit
Nuclei	OttoKit < 1.0.83 - SureTriggers allows Privilege Escalation	7 Jun 202603:02	–	nuclei
NVD	CVE-2025-27007	1 May 202511:15	–	nvd
OpenVAS	WordPress SureTriggers Plugin < 1.0.83 Privilege Escalation Vulnerability	15 May 202500:00	–	openvas
Packet Storm	📄 WordPress OttoKit 1.0.82 Privilege Escalation	7 May 202500:00	–	packetstorm
Patchstack	WordPress SureTriggers <= 1.0.82 - Privilege Escalation Vulnerability	30 Apr 202513:18	–	patchstack

Vulners

Node

brainstorm_force ottokitRange≤1.0.82wordpress

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "suretriggers",
    "product": "OttoKit",
    "vendor": "Brainstorm Force",
    "versions": [
      {
        "changes": [
          {
            "at": "1.0.83",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.0.82",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]