Lucene search
+L

62 matches found

Kitploit
Kitploit
added 2026/08/26 11:42 a.m.2 views

CVE-2025-3102

🔐 CVE-2025-3102 – Bypass dell'autenticazione nel plugin WordPress SureTriggers 🚨 CVE-2025-3102 è una vulnerabilità critica di bypass dell'autenticazione che colpisce il plugin WordPress SureTriggers: All-in-One Automation Platform , installato attivamente su oltre 100.000 siti web. A causa della...

8.1CVSS0.7568EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.2 views

CVE-2025-3102

CVE-2025-3102 🛠️ Script di exploit SureTriggers Questo script viene utilizzato per identificare e sfruttare le vulnerabilità di sicurezza nel plugin SureTriggers sui siti WordPress che utilizzano una versione vulnerabile ≤ v1.0.78. In caso di successo, lo script creerà automaticamente un account...

8.1CVSS8.3AI score0.7568EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.1 views

CVE-2025-3102

CVE-2025-3102 Il plugin WordPress SureTriggers contiene una vulnerabilità critica di bypass dell'autenticazione CVE-2025-3102 che riguarda tutte le versioni fino alla 1.0.78 inclusa...

8.1CVSS8.3AI score0.7568EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/08/25 9:41 p.m.1 views

vanda-CVE-2025-3102

Vanda CVE-2025-3102 💣 Exploit con interfaccia grafica per la vulnerabilità CVE-2025-3102 nel plugin WordPress SureTriggers = 1.0.78. 🚀 FUNZIONALITÀ Identificazione dei siti vulnerabili 🕵️‍♂️ Sfruttamento automatico con creazione di un utente amministratore 👨‍💻 Interfaccia grafica stile cyberpunk 🌌...

8.1CVSS8.6AI score0.7568EPSS
SaveExploits8References3
Kitploit
Kitploit
added 2026/08/25 9:29 p.m.5 views

CVE-2025-3102

🔐 CVE-2025-3102 – Bypass dell'autenticazione nel plugin WordPress SureTriggers 🚨 CVE-2025-3102 è una vulnerabilità critica di bypass dell'autenticazione che colpisce il plugin WordPress SureTriggers: All-in-One Automation Platform , installato attivamente su oltre 100.000 siti web. Data la natura...

8.1CVSS8.3AI score0.7568EPSS
SaveExploits8
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.67 views

OttoKit < 1.0.83 - SureTriggers allows Privilege Escalation

Incorrect Privilege Assignment vulnerability in Brainstorm Force SureTriggers allows Privilege Escalation.This issue affects SureTriggers- from n/a through 1.0.82. id: CVE-2025-27007 info: name: OttoKit 1.0.83 - SureTriggers allows Privilege Escalation author: iamnoooob,rootxharsh,pdresearch...

9.8CVSS9.1AI score0.5148EPSS
SaveExploits3References3
Kitploit
Kitploit
added 2026/08/24 9:36 a.m.2 views

CVE-2025-3102

SureTriggers 🔥 Desenvolvido por 0xgh057r3c0n 📌 Detalhes da Vulnerabilidade Nome do Plugin: SureTriggers Versões Afetadas: --newmail --newuser --newpassword 🔍 Exemplo: root@kitploit:...

8.1CVSS8.6AI score0.7568EPSS
SaveExploits8References1
Positive Technologies
Positive Technologies
added 2026/06/15 12:00 a.m.40 views

PT-2026-49187

Name of the Vulnerable Software and Affected Versions OttoKit versions prior to 1.1.28 Description Unauthenticated PHP Object Injection occurs in the software. PHP Object Injection is a vulnerability that allows an attacker to pass malicious serialized objects into the application, which can lead...

9.8CVSS6AI score0.005EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2026/05/11 9:35 a.m.16 views

WordPress SureTriggers plugin < 1.1.23 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by mcdruid in WordPress Plugin OttoKit versions 1.1.23...

8.6CVSS5.8AI score0.00262EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2026/05/08 6:00 a.m.25 views

CVE-2026-4935

CVE-2026-4935 affects the OttoKit: All-in-One Automation Platform WordPress plugin, exposed prior to version 1.1.23. The root cause is improper sanitization of user input used in SQL statements, enabling unauthenticated SQL injection. The CVSS‑3.1 vector is Network, Low complexity, No privileges,...

8.6CVSS5.9AI score0.00262EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/08 6:00 a.m.60 views

CVE-2026-4935 SureTriggers < 1.1.23 – Unauthenticated SQLi

The OttoKit: All-in-One Automation Platform WordPress plugin before 1.1.23 does not properly sanitize user input before using it in a SQL statement, which could allow unauthenticated attackers to perform SQL injection attacks...

0.00262EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/05/08 6:00 a.m.13 views

CVE-2026-4935 SureTriggers < 1.1.23 – Unauthenticated SQLi

The OttoKit: All-in-One Automation Platform WordPress plugin before 1.1.23 does not properly sanitize user input before using it in a SQL statement, which could allow unauthenticated attackers to perform SQL injection attacks...

5.9AI score0.00262EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/04/13 7:24 p.m.9 views

CVE-2026-39479

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Brainstorm Force OttoKit suretriggers allows Blind SQL Injection.This issue affects OttoKit: from n/a through = 1.1.20...

7.6CVSS5.9AI score0.00279EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/08 9:16 a.m.20 views

CVE-2026-39479

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Brainstorm Force OttoKit suretriggers allows Blind SQL Injection.This issue affects OttoKit: from n/a through = 1.1.20...

7.6CVSS0.00279EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/08 8:30 a.m.6 views

CVE-2026-39479

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Brainstorm Force OttoKit suretriggers allows Blind SQL Injection.This issue affects OttoKit: from n/a through = 1.1.20...

5.9AI score0.00279EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/08 12:00 a.m.18 views

PT-2026-31120

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Brainstorm Force OttoKit suretriggers allows Blind SQL Injection.This issue affects OttoKit: from n/a through = 1.1.20...

5.9AI score0.00279EPSS
SaveExploits0References4
Packet Storm
Packet Storm
added 2026/02/06 12:00 a.m.232 views

📄 WordPress SureTriggers 1.0.78 Authentication Bypass

WordPress SureTriggers plugin versions 1.0.78 and below expose an unauthenticated REST endpoint that allows construction of a user creation payload. This proof of concept demonstrates structure and logic only. No admin account is created, no plugin uploaded...

8.1CVSS5.3AI score0.7568EPSS
SaveExploits8
EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2024-46695

Malicious code in bioql PyPI...

6.4CVSS6.4AI score0.00355EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2023-53672

Malicious code in bioql PyPI...

8.8CVSS9.1AI score0.00256EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/06/13 12:00 a.m.14 views

The vulnerability of the SureTriggers plugin of the WordPress content management system allows attackers to increase their privileges.

The vulnerability of the SureTriggers plugin in the WordPress content management system is related to incorrect privilege assignment. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

10CVSS8.1AI score0.5148EPSS
SaveExploits3References2Affected Software1
Rows per page
Query Builder