Lucene search
+L

41 matches found

NVD
NVD
•added 2026/05/08 7:16 a.m.•17 views

CVE-2026-4935

The OttoKit: All-in-One Automation Platform WordPress plugin before 1.1.23 does not properly sanitize user input before using it in a SQL statement, which could allow unauthenticated attackers to perform SQL injection attacks...

8.6CVSS0.00445EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/05/08 6:00 a.m.•11 views

CVE-2026-4935

The OttoKit: All-in-One Automation Platform WordPress plugin before 1.1.23 does not properly sanitize user input before using it in a SQL statement, which could allow unauthenticated attackers to perform SQL injection attacks...

5.9AI score0.00445EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/08 12:00 a.m.•1 views

CVE-2026-4935: Improper Neutralization of Special Elements used in an SQL Command

The OttoKit: All-in-One Automation Platform WordPress plugin before 1.1.23 does not properly sanitize user input before using it in a SQL statement, which could allow unauthenticated attackers to perform SQL injection attacks...

8.6CVSS5.8AI score0.00445EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/08 12:00 a.m.•36 views

PT-2026-38676

Name of the Vulnerable Software and Affected Versions OttoKit: All-in-One Automation Platform WordPress plugin versions prior to 1.1.23 Description Insufficient sanitization of user input used in a SQL statement allows unauthenticated attackers to perform SQL injection attacks. Recommendations...

8.6CVSS5.8AI score0.00445EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/05/08 12:00 a.m.•18 views

WordPress plugin OttoKit: All-in-One Automation Platform SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

8.6CVSS6AI score0.00445EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/08 9:31 a.m.•15 views

EUVD-2026-20146

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Brainstorm Force OttoKit suretriggers allows Blind SQL Injection.This issue affects OttoKit: from n/a through = 1.1.20...

5.9AI score0.00383EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/08 9:16 a.m.•25 views

CVE-2026-39479

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Brainstorm Force OttoKit suretriggers allows Blind SQL Injection.This issue affects OttoKit: from n/a through = 1.1.20...

7.6CVSS0.00383EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/08 8:30 a.m.•33 views

CVE-2026-39479

The CVE-2026-39479 entry documents a vulnerability in the WordPress OttoKit SureTriggers plugin (OttoKit) affecting versions up to 1.1.20. The issue is Improper Neutralization of Special Elements used in an SQL Command, i.e., a Blind SQL Injection condition. Reported across multiple sources (NVD,...

7.6CVSS5.9AI score0.00383EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/08 8:30 a.m.•5 views

CVE-2026-39479 WordPress OttoKit plugin <= 1.1.20 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Brainstorm Force OttoKit suretriggers allows Blind SQL Injection.This issue affects OttoKit: from n/a through = 1.1.20...

5.9AI score0.00383EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/08 8:30 a.m.•9 views

CVE-2026-39479

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Brainstorm Force OttoKit suretriggers allows Blind SQL Injection.This issue affects OttoKit: from n/a through = 1.1.20...

5.9AI score0.00383EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/04/08 8:30 a.m.•44 views

CVE-2026-39479 WordPress OttoKit plugin <= 1.1.20 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Brainstorm Force OttoKit suretriggers allows Blind SQL Injection.This issue affects OttoKit: from n/a through = 1.1.20...

7.6CVSS0.00383EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•1 views

CVE-2026-39479: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Brainstorm Force OttoKit suretriggers allows Blind SQL Injection.This issue affects OttoKit: from n/a through = 1.1.20...

7.6CVSS5.8AI score0.00383EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•17 views

WordPress plugin OttoKit SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.6CVSS5.9AI score0.00383EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•21 views

PT-2026-31120

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Brainstorm Force OttoKit suretriggers allows Blind SQL Injection.This issue affects OttoKit: from n/a through = 1.1.20...

5.9AI score0.00383EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2026/03/23 9:10 a.m.•17 views

WordPress OttoKit plugin <= 1.1.20 - SQL Injection vulnerability

SQL Injection vulnerability discovered by timomangcut in WordPress Plugin OttoKit versions = 1.1.20...

7.6CVSS5.9AI score0.00383EPSS
SaveExploits0Affected Software1
Exploit DB
Exploit DB
•added 2025/05/09 12:00 a.m.•343 views

SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation

Exploit Title: SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation Date: 2025-05-7 Exploit Author: Abdualhadi khalifa https://x.com/absholi7ly/ Affected: Versions All versions of OttoKit SureTriggers ≤ 1.0.82. Conditions for Exploitation The vulnerability can be exploited under the followin...

9.8CVSS8.7AI score0.53884EPSS
SaveExploits3
The Hacker News
The Hacker News
•added 2025/05/07 1:44 p.m.•40 views

OttoKit WordPress Plugin with 100K+ Installs Hit by Exploits Targeting Multiple Flaws

A second security flaw impacting the OttoKit formerly SureTriggers WordPress plugin has come under active exploitation in the wild. The vulnerability, tracked as CVE-2025-27007 CVSS score: 9.8, is a privilege escalation bug impacting all versions of the plugin prior to and including version 1.0.8...

9.8CVSS9.6AI score0.76237EPSS
SaveExploits10
Packet Storm
Packet Storm
•added 2025/05/07 12:00 a.m.•122 views

📄 WordPress OttoKit 1.0.82 Privilege Escalation

WordPress OttoKit plugin versions 1.0.82 and below suffer from a privilege escalation vulnerability. This plugin used to be called SureTriggers. CVE-2025-27007: OttoKit SureTriggers Privilege Escalation Vulnerability Exploitation of CVE-2025-27007, a critical vulnerability in unauthorized privile...

9.8CVSS9.7AI score0.53884EPSS
SaveExploits3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/01 12:00 a.m.•0 views

CVE-2025-27007: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through = 1.0.82...

9.8CVSS8.5AI score0.53884EPSS
SaveExploits3References1
VulnCheck KEV
VulnCheck KEV
•added 2025/04/30 12:00 a.m.•8 views

VulnCheck KEV: CVE-2025-27007

Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through = 1.0.82...

9.8CVSS5.8AI score0.53884EPSS
SaveIn wildExploits3References27
Rows per page
Query Builder