CVE-2026-4935

CVE-2026-4935 affects the OttoKit: All-in-One Automation Platform WordPress plugin, exposed prior to version 1.1.23. The root cause is improper sanitization of user input used in SQL statements, enabling unauthenticated SQL injection. The CVSS‑3.1 vector is Network, Low complexity, No privileges,...