OttoKit WordPress Plugin Admin Creation Vulnerability Under Active Exploitation

A high-severity security flaw affecting OttoKit (formerly SureTriggers), known as CVE-2025-3102 with a CVSS score of 8.1, is being actively exploited shortly after being disclosed. This vulnerability is an authorization bypass bug that could allow attackers to create administrator accounts and potentially take over vulnerable websites.

Full Article