A high-severity security flaw affecting OttoKit (formerly SureTriggers), known as CVE-2025-3102 with a CVSS score of 8.1, is being actively exploited shortly after being disclosed. This vulnerability is an authorization bypass bug that could allow attackers to create administrator accounts and potentially take over vulnerable websites.
Full Article
OttoKit WordPress Plugin Admin Creation Vulnerability Under Active Exploitation
News Summarized. Time Saved. Bite-sized news briefs for busy people. No fluff, just facts.