CVE-2025-3102

🗓️ 10 Apr 2025 04:22:05Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 382 Views

CVE-2025-3102 allows unauthenticated users to create admin accounts in SureTriggers plugin versions ≤ 1.0.78.

Reporter	Title	Published	Views	Family All 40
GithubExploit	Exploit for CVE-2025-3102	12 Apr 202504:22	–	githubexploit
GithubExploit	Exploit for CVE-2025-3102	14 Apr 202516:07	–	githubexploit
GithubExploit	Exploit for CVE-2025-3102	14 Apr 202510:20	–	githubexploit
GithubExploit	Exploit for CVE-2025-3102	20 Apr 202513:59	–	githubexploit
GithubExploit	Exploit for CVE-2025-3102	12 Apr 202504:22	–	githubexploit
BDU FSTEC	SureTriggers Plugin Administrator Account Creation	28 Apr 202500:00	–	bdu_fstec
Circl	CVE-2025-3102	10 Apr 202504:49	–	circl
CNNVD	WordPress plugin SureTriggers has a security vulnerability	10 Apr 202500:00	–	cnnvd
Cvelist	CVE-2025-3102 SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User Creation	10 Apr 202504:22	–	cvelist
Kitploit	CVE-2025-3102	31 Oct 202623:54	–	kitploit

Vulners

Node

brainstormforce ottokitRange≤1.0.78wordpress

[
  {
    "vendor": "brainstormforce",
    "product": "OttoKit: All-in-One Automation Platform",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.0.78",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/suretriggers/trunk/src/Controllers/RestController.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/ec017311-f150-4a14-a4b4-b5634f574e2b
plugins	www.plugins.trac.wordpress.org/changeset