53 matches found
WordPress OttoKit Plugin <= 1.1.40 - Unauthenticated Privilege Escalation via connection-denied Token
OttoKit formerly SureTriggers WordPress plugin = 1.1.40 unauthenticated privilege escalation. When an admin denies the OttoKit SaaS connection, the plugin stores the fixed public string 'connection-denied' as the site API secret. The RestController::autheticateuser permission callback reads the...
OttoKit < 1.0.83 - SureTriggers allows Privilege Escalation
Incorrect Privilege Assignment vulnerability in Brainstorm Force SureTriggers allows Privilege Escalation.This issue affects SureTriggers- from n/a through 1.0.82. id: CVE-2025-27007 info: name: OttoKit 1.0.83 - SureTriggers allows Privilege Escalation author: iamnoooob,rootxharsh,pdresearch...
CVE-2025-27007-OttoKit-exploit
CVE-2025-27007: OttoKit SureTriggers Privilege Escalation Vulnerability Exploitation of CVE-2025-27007, a critical vulnerability in unauthorized privilege escalation in the OttoKit plugin formerly known as SureTriggers for WordPress. This repository outlines how an attacker can create an...
CVE-2026-110372
Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40...
CVE-2026-110372
The WordPress OttoKit plugin (versions
EUVD-2026-103424
Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40...
CVE-2026-110372 WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40...
CVE-2026-110372 WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40...
CVE-2026-110372: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40...
PT-2026-116591
Name of the Vulnerable Software and Affected Versions OttoKit suretriggers versions prior to 1.1.41 Description An incorrect privilege assignment issue allows for privilege escalation. Recommendations Update to version 1.1.41 or later...
WordPress OttoKit: Permissions, licensing, and access control issues
WordPress OttoKit versions 1.1.40 and earlier have vulnerabilities related to permission granting and access control. These vulnerabilities stem from improper permission allocation, which may lead to unauthorized privilege escalation...
WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Peter Tang in WordPress Plugin OttoKit versions = 1.1.40...
VulnCheck KEV: CVE-2026-110372
Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40...
CVE-2026-32553
Unauthenticated Server Side Request Forgery SSRF in OttoKit = 1.1.35 versions...
CVE-2026-32553
The WordPress OttoKit plugin (versions
CVE-2026-32553
Unauthenticated Server Side Request Forgery SSRF in OttoKit = 1.1.35 versions...
CVE-2026-32553 WordPress OttoKit plugin <= 1.1.35 - Server Side Request Forgery (SSRF) vulnerability
Unauthenticated Server Side Request Forgery SSRF in OttoKit = 1.1.35 versions...
EUVD-2026-60912
Unauthenticated Server Side Request Forgery SSRF in OttoKit = 1.1.35 versions...