Lucene search
+L

56 matches found

RedhatCVE
RedhatCVE
added 2025/05/03 11:8 a.m.52 views

CVE-2025-27007

Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through = 1.0.82...

9.8CVSS7.4AI score0.51036EPSS
SaveExploits3References1
NVD
NVD
added 2025/05/01 11:15 a.m.48 views

CVE-2025-27007

Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through = 1.0.82...

9.8CVSS0.51036EPSS
SaveExploits3References1
CVE
CVE
added 2025/05/01 10:54 a.m.178 views

CVE-2025-27007

CVE-2025-27007 affects WordPress plugin SureTriggers (also called OttoKit) up to version 1.0.82. The vulnerability is an Incorrect Privilege Assignment that allows unauthenticated privilege escalation via the SureTriggers REST API endpoints, enabling an attacker to create an administrator account...

9.8CVSS7.4AI score0.51036EPSS
SaveExploits3References1
Cvelist
Cvelist
added 2025/05/01 10:54 a.m.69 views

CVE-2025-27007 WordPress SureTriggers <= 1.0.82 - Privilege Escalation Vulnerability

Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through = 1.0.82...

9.8CVSS0.51036EPSS
SaveExploits3References1
Vulnrichment
Vulnrichment
added 2025/05/01 10:54 a.m.21 views

CVE-2025-27007 WordPress SureTriggers <= 1.0.82 - Privilege Escalation Vulnerability

Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through = 1.0.82...

9.8CVSS8.9AI score0.51036EPSS
SaveExploits3References1
Positive Technologies
Positive Technologies
added 2025/05/01 12:0 a.m.13 views

PT-2025-18381

Name of the Vulnerable Software and Affected Versions Brainstorm Force SureTriggers versions 1.0.0 through 1.0.82 Description The issue is related to an incorrect privilege assignment vulnerability in Brainstorm Force SureTriggers, allowing privilege escalation. This vulnerability can be exploite...

9.8CVSS9.8AI score0.51036EPSS
SaveExploits3References48
CNNVD
CNNVD
added 2025/05/01 12:0 a.m.14 views

WordPress plugin SureTriggers 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS9.2AI score0.51036EPSS
SaveExploits3References4
Patchstack
Patchstack
added 2025/04/30 1:18 p.m.20 views

WordPress SureTriggers <= 1.0.82 - Privilege Escalation Vulnerability

Privilege Escalation Vulnerability discovered by Denver Jackson Patchstack Alliance in WordPress Plugin OttoKit versions = 1.0.82...

9.8CVSS9.4AI score0.51036EPSS
SaveExploits3References1Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2025/04/30 12:0 a.m.5 views

VulnCheck KEV: CVE-2025-27007

Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through = 1.0.82...

9.8CVSS5.8AI score0.51036EPSS
SaveExploits3References1
Tenable Nessus
Tenable Nessus
added 2025/04/29 12:0 a.m.13 views

SureTriggers Plugin for WordPress < 1.0.79 Authorization Bypass

The WordPress SureTriggers Plugin installed on the remote host is affected by an Authorization Bypass. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

8.1CVSS7.4AI score0.7568EPSS
SaveExploits8References2
BDU FSTEC
BDU FSTEC
added 2025/04/28 12:0 a.m.12 views

The vulnerability of the SureTriggers plugin of the WordPress content management system allows attackers to create administrator accounts on the website.

The vulnerability of the SureTriggers plugin of the WordPress content management system is related to insufficient comparison. Exploiting this vulnerability could allow a malicious actor to create administrator accounts on the website...

8.1CVSS8AI score0.7568EPSS
SaveExploits8References6Affected Software1
GithubExploit
GithubExploit
added 2025/04/20 1:59 p.m.226 views

Exploit for CVE-2025-3102

CVE-2025-3102 🛠️ SureTriggers Exploit Script Script ini diguna...

8.1CVSS7.2AI score0.7568EPSS
SaveExploits8
GithubExploit
GithubExploit
added 2025/04/14 4:7 p.m.193 views

Exploit for CVE-2025-3102

🔐 CVE-2025-3102 – Authentication Bypass in SureTriggers WordPr...

8.1CVSS8.6AI score0.7568EPSS
SaveExploits8
GithubExploit
GithubExploit
added 2025/04/14 10:20 a.m.220 views

Exploit for CVE-2025-3102

🔐 CVE-2025-3102 – Authentication Bypass in SureTriggers WordPr...

8.1CVSS7.7AI score0.7568EPSS
SaveExploits8
Packet Storm News
Packet Storm News
added 2025/04/14 12:0 a.m.13 views

WordPress SureTriggers All-in-One Automation Platform 1.0.78 Authentication Bypass

WordPress SureTriggers All-in-One Automation Platform plugin versions 1.0.78 and below suffer from an authentication bypass vulnerability that allows for privilege escalation...

8.1CVSS7.3AI score0.7568EPSS
SaveExploits8
GithubExploit
GithubExploit
added 2025/04/12 4:22 a.m.488 views

Exploit for CVE-2025-3102

Vanda CVE-2025-3102 💣 Exploit com interface gráfica para a vuln...

8.1CVSS8.3AI score0.7568EPSS
SaveExploits8
Vulnrichment
Vulnrichment
added 2025/04/10 4:22 a.m.16 views

CVE-2025-3102 SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User Creation

The SureTriggers: All-in-One Automation Platform plugin for WordPress is vulnerable to an authentication bypass leading to administrative account creation due to a missing empty value check on the 'secretkey' value in the 'autheticateuser' function in all versions up to, and including, 1.0.78. Th...

8.1CVSS8.2AI score0.7568EPSS
SaveExploits8References3
Cvelist
Cvelist
added 2025/04/10 4:22 a.m.66 views

CVE-2025-3102 SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User Creation

The SureTriggers: All-in-One Automation Platform plugin for WordPress is vulnerable to an authentication bypass leading to administrative account creation due to a missing empty value check on the 'secretkey' value in the 'autheticateuser' function in all versions up to, and including, 1.0.78. Th...

8.1CVSS0.7568EPSS
SaveExploits8References3
CVE
CVE
added 2025/04/10 4:22 a.m.317 views

CVE-2025-3102

CVE-2025-3102 — SureTriggers WordPress plugin (≤ 1.0.78) vulnerable to authentication bypass that allows unauthenticated creation of administrator accounts via the plugin’s REST API when the API key is not configured. Evidence across sources shows a missing empty value check on the secret_key in ...

8.1CVSS8.2AI score0.7568EPSS
SaveIn wildExploits8References3
CNNVD
CNNVD
added 2025/04/10 12:0 a.m.14 views

WordPress plugin SureTriggers 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.1CVSS8.3AI score0.7568EPSS
SaveExploits8References4
Rows per page
Query Builder