Lucene search
+L

34 matches found

Nuclei
Nuclei
added 2026/08/24 5:53 a.m.67 views

OttoKit < 1.0.83 - SureTriggers allows Privilege Escalation

Incorrect Privilege Assignment vulnerability in Brainstorm Force SureTriggers allows Privilege Escalation.This issue affects SureTriggers- from n/a through 1.0.82. id: CVE-2025-27007 info: name: OttoKit 1.0.83 - SureTriggers allows Privilege Escalation author: iamnoooob,rootxharsh,pdresearch...

9.8CVSS9.1AI score0.5148EPSS
SaveExploits3References3
NVD
NVD
added 2026/08/18 3:16 p.m.5 views

CVE-2026-32553

Unauthenticated Server Side Request Forgery SSRF in OttoKit = 1.1.35 versions...

7.2CVSS0.00255EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/18 1:59 p.m.20 views

CVE-2026-32553

The WordPress OttoKit plugin (versions

7.2CVSS5.2AI score0.00255EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/18 1:59 p.m.7 views

EUVD-2026-60912

Unauthenticated Server Side Request Forgery SSRF in OttoKit = 1.1.35 versions...

7.2CVSS5.2AI score0.00255EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/18 1:59 p.m.20 views

CVE-2026-32553 WordPress OttoKit plugin <= 1.1.35 - Server Side Request Forgery (SSRF) vulnerability

Unauthenticated Server Side Request Forgery SSRF in OttoKit = 1.1.35 versions...

7.2CVSS0.00255EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/18 1:59 p.m.9 views

CVE-2026-32553

Unauthenticated Server Side Request Forgery SSRF in OttoKit = 1.1.35 versions...

7.2CVSS5.2AI score0.00255EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2026/08/14 10:18 a.m.8 views

WordPress OttoKit plugin <= 1.1.35 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by Abduvoris Karimov in WordPress Plugin OttoKit versions = 1.1.35...

7.2CVSS5.3AI score0.00255EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2026/06/15 9:17 p.m.26 views

CVE-2026-49781

Unauthenticated PHP Object Injection in OttoKit = 1.1.27 versions...

9.8CVSS0.005EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/15 8:19 p.m.22 views

EUVD-2026-36898

Unauthenticated PHP Object Injection in OttoKit = 1.1.27 versions...

9.8CVSS5.3AI score0.005EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/06/15 8:19 p.m.15 views

CVE-2026-49781 WordPress OttoKit plugin <= 1.1.27 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in OttoKit = 1.1.27 versions...

9.8CVSS5.3AI score0.005EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/15 8:19 p.m.84 views

CVE-2026-49781 WordPress OttoKit plugin <= 1.1.27 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in OttoKit = 1.1.27 versions...

9.8CVSS0.005EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/15 8:19 p.m.32 views

CVE-2026-49781

The CVE-2026-49781 entry describes an unauthenticated PHP Object Injection in the WordPress OttoKit plugin, affected versions

9.8CVSS5.3AI score0.005EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:45 p.m.13 views

CVE-2026-4935

The OttoKit: All-in-One Automation Platform WordPress plugin before 1.1.23 does not properly sanitize user input before using it in a SQL statement, which could allow unauthenticated attackers to perform SQL injection attacks...

8.6CVSS5.6AI score0.00262EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/06/04 9:58 a.m.23 views

WordPress OttoKit plugin <= 1.1.27 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by daroo in WordPress Plugin OttoKit versions = 1.1.27...

9.8CVSS5.5AI score0.005EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/05/11 9:35 a.m.16 views

WordPress SureTriggers plugin < 1.1.23 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by mcdruid in WordPress Plugin OttoKit versions 1.1.23...

8.6CVSS5.8AI score0.00262EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/05/08 9:31 a.m.15 views

EUVD-2026-28532

The OttoKit: All-in-One Automation Platform WordPress plugin before 1.1.23 does not properly sanitize user input before using it in a SQL statement, which could allow unauthenticated attackers to perform SQL injection attacks...

8.6CVSS5.9AI score0.00262EPSS
SaveExploits0References2
NVD
NVD
added 2026/05/08 7:16 a.m.14 views

CVE-2026-4935

The OttoKit: All-in-One Automation Platform WordPress plugin before 1.1.23 does not properly sanitize user input before using it in a SQL statement, which could allow unauthenticated attackers to perform SQL injection attacks...

8.6CVSS0.00262EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/08 6:00 a.m.9 views

CVE-2026-4935

The OttoKit: All-in-One Automation Platform WordPress plugin before 1.1.23 does not properly sanitize user input before using it in a SQL statement, which could allow unauthenticated attackers to perform SQL injection attacks...

5.9AI score0.00262EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/08 12:00 a.m.33 views

PT-2026-38676

Name of the Vulnerable Software and Affected Versions OttoKit: All-in-One Automation Platform WordPress plugin versions prior to 1.1.23 Description Insufficient sanitization of user input used in a SQL statement allows unauthenticated attackers to perform SQL injection attacks. Recommendations...

8.6CVSS5.8AI score0.00262EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/05/08 12:00 a.m.13 views

WordPress plugin OttoKit: All-in-One Automation Platform SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

8.6CVSS6AI score0.00262EPSS
SaveExploits0References1
Rows per page
Query Builder