CVE-2025-3102

CVE-2025-3102 🛠️ Script de Explotación de SureTriggers Este script se utiliza para identificar y explotar una vulnerabilidad de seguridad en el plugin SureTriggers en sitios WordPress que utilizan una versión vulnerable ≤ v1.0.78. Si tiene éxito, el script crea automáticamente una cuenta de...

CVE-2025-3102

CVE-2025-3102 SureTriggers WordPress 插件存在一个严重身份验证绕过漏洞（CVE-2025-3102），影响所有版本，包括1.0.78及之前版本。...

OttoKit < 1.0.83 - SureTriggers allows Privilege Escalation

Incorrect Privilege Assignment vulnerability in Brainstorm Force SureTriggers allows Privilege Escalation.This issue affects SureTriggers- from n/a through 1.0.82. id: CVE-2025-27007 info: name: OttoKit 1.0.83 - SureTriggers allows Privilege Escalation author: iamnoooob,rootxharsh,pdresearch...

vanda-CVE-2025-3102

Vanda CVE-2025-3102 💣 针对 WordPress 插件 SureTriggers = 1.0.78 中 CVE-2025-3102 漏洞的图形界面利用工具。 🚀 功能 识别易受攻击的网站 🕵️‍♂️ 自动利用并创建管理员用户 👨‍💻 赛博朋克风格的图形界面 🌌 结果保存至 .txt 文件以便查阅 📑 🧠 CVE 详情 CVE-2025-3102 漏洞允许通过 SureTriggers API 未经身份验证创建管理员 。当插件已安装但未正确配置 API 密钥时，此漏洞即会触发。 这意味着任何攻击者都可以利用该漏洞在易受攻击的网站上获得管理员权限，而无需身份验证！😱 🖥️...

CVE-2025-3102

SureTriggers 🔥 由 0xgh057r3c0n 开发 📌 漏洞详情 插件名称： SureTriggers 受影响版本： --newmail --newuser --newpassword 🔍 示例： root@kitploit: python3 CVE-2025-3102.py -u https://target-site.com --newuser hacker --newpassword Pass123! 📋 选项 🧠 工作原理 1. 通过读取 readme.txt 检查插件版本。 2. 构造一个特殊请求到...

CVE-2025-3102

🔐 CVE-2025-3102 – SureTriggers WordPress 插件中的身份验证绕过漏洞 🚨 CVE-2025-3102 是一个影响 SureTriggers: All-in-One Automation Platform WordPress 插件的严重身份验证绕过漏洞，该插件已活跃安装在超过 100,000 个网站上。由于该漏洞的性质和部署规模，此漏洞构成了重大的安全风险。 🧠 漏洞概要 CVE ID : CVE-2025-3102 受影响的插件 : SureTriggers – All-in-One Automation Platform 受影响版本 : ≤...

CVE-2025-3102

🔐 CVE-2025-3102 – Omisión de Autenticación en el Plugin SureTriggers de WordPress 🚨 CVE-2025-3102 es una vulnerabilidad crítica de omisión de autenticación que afecta al plugin de WordPress SureTriggers: All-in-One Automation Platform , el cual está instalado activamente en más de 100,000 sitios...

PT-2026-49187

Name of the Vulnerable Software and Affected Versions OttoKit versions prior to 1.1.28 Description Unauthenticated PHP Object Injection occurs in the software. PHP Object Injection is a vulnerability that allows an attacker to pass malicious serialized objects into the application, which can lead...

WordPress SureTriggers plugin < 1.1.23 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by mcdruid in WordPress Plugin OttoKit versions 1.1.23...

CVE-2026-4935

CVE-2026-4935 affects the OttoKit: All-in-One Automation Platform WordPress plugin, exposed prior to version 1.1.23. The root cause is improper sanitization of user input used in SQL statements, enabling unauthenticated SQL injection. The CVSS‑3.1 vector is Network, Low complexity, No privileges,...

CVE-2026-4935 SureTriggers < 1.1.23 – Unauthenticated SQLi

The OttoKit: All-in-One Automation Platform WordPress plugin before 1.1.23 does not properly sanitize user input before using it in a SQL statement, which could allow unauthenticated attackers to perform SQL injection attacks...

CVE-2026-4935 SureTriggers < 1.1.23 – Unauthenticated SQLi

The OttoKit: All-in-One Automation Platform WordPress plugin before 1.1.23 does not properly sanitize user input before using it in a SQL statement, which could allow unauthenticated attackers to perform SQL injection attacks...

CVE-2026-39479

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Brainstorm Force OttoKit suretriggers allows Blind SQL Injection.This issue affects OttoKit: from n/a through = 1.1.20...

CVE-2026-39479

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Brainstorm Force OttoKit suretriggers allows Blind SQL Injection.This issue affects OttoKit: from n/a through = 1.1.20...

CVE-2026-39479

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Brainstorm Force OttoKit suretriggers allows Blind SQL Injection.This issue affects OttoKit: from n/a through = 1.1.20...

PT-2026-31120

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Brainstorm Force OttoKit suretriggers allows Blind SQL Injection.This issue affects OttoKit: from n/a through = 1.1.20...

📄 WordPress SureTriggers 1.0.78 Authentication Bypass

WordPress SureTriggers plugin versions 1.0.78 and below expose an unauthenticated REST endpoint that allows construction of a user creation payload. This proof of concept demonstrates structure and logic only. No admin account is created, no plugin uploaded...

EUVD-2024-46695

Malicious code in bioql PyPI...

EUVD-2023-53672

Malicious code in bioql PyPI...

The vulnerability of the SureTriggers plugin of the WordPress content management system allows attackers to increase their privileges.

The vulnerability of the SureTriggers plugin in the WordPress content management system is related to incorrect privilege assignment. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...