← back
CVE-2025-27007criticalobserved exploitationCWE-266

WordPress SureTriggers <= 1.0.82 - Privilege Escalation Vulnerability

97Vexday Risk Score

Patch now. It exploitation observed by VulnCheck and has a working public exploit.

ssvc Actcvss 9.8epss 51%
from disclosure to weapon6 days
Published on NVDMay 1
1st PoC+6d
metasploitMar 13
VulnCheckApr 30
exploitation probability
51%top 1% of all CVEs
observed exploitation
yesVulnCheck
3 public exploit(s)
Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through <= 1.0.82.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.