/Vulnerability Library

OttoKit < 1.0.83 - SureTriggers allows Privilege Escalation

CVE-2025-27007
Verified

Description

Incorrect Privilege Assignment vulnerability in Brainstorm Force SureTriggers allows Privilege Escalation.This issue affects SureTriggers- from n/a through 1.0.82.

Severity

Critical

CVSS Score

9.8

Exploit Probability

54%

Published Date

May 13, 2025

Template Author

iamnoooob, rootxharsh, pdresearch

CVE-2025-27007.yaml
9.8Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVE ID:
cve-2025-27007
CWE ID:
cwe-266

References

https://patchstack.com/articles/additional-critical-ottokit-formerly-suretriggers-vulnerability-patched?_s_id=cvehttps://patchstack.com/database/wordpress/plugin/suretriggers/vulnerability/wordpress-suretriggers-1-0-82-privilege-escalation-vulnerability?_s_id=cvehttps://nvd.nist.gov/vuln/detail/CVE-2025-27007

Remediation Steps

Upgrade to SureTriggers version 1.0.83 or later that implements proper privilege assignment checks.