WordPress OttoKit: Permissions, licensing, and access control issues

WordPress OttoKit versions 1.1.40 and earlier have vulnerabilities related to permission granting and access control. These vulnerabilities stem from improper permission allocation, which may lead to unauthorized privilege escalation...

CVE-2026-39479

The CVE-2026-39479 entry documents a vulnerability in the WordPress OttoKit SureTriggers plugin (OttoKit) affecting versions up to 1.1.20. The issue is Improper Neutralization of Special Elements used in an SQL Command, i.e., a Blind SQL Injection condition. Reported across multiple sources (NVD,...