Brainstorm Force OttoKit vulnerabilities

Latest Brainstorm Force OttoKit CVEs

Newest publication first

1. CVE-2026-110372 WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability

   Published 2026-10-18

   Critical·CVSS 9.8 EPSS 1.4%

   Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40.

2. CVE-2026-32553 WordPress OttoKit plugin <= 1.1.35 - Server Side Request Forgery (SSRF) vulnerability

   Published 2026-08-18

   High·CVSS 7.2 EPSS 0.27%

   Unauthenticated Server Side Request Forgery (SSRF) in OttoKit <= 1.1.35 versions.

3. CVE-2026-49781 WordPress OttoKit plugin <= 1.1.27 - PHP Object Injection vulnerability

   Published 2026-06-15

   Critical·CVSS 9.8 EPSS 0.50%

   Unauthenticated PHP Object Injection in OttoKit <= 1.1.27 versions.

4. CVE-2026-39479 WordPress OttoKit plugin <= 1.1.20 - SQL Injection vulnerability

   Published 2026-04-08

   High·CVSS 7.6 EPSS 0.29%

   Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Brainstorm Force OttoKit suretriggers allows Blind SQL Injection.This issue affects OttoKit: from n/a through <= 1.1.20.

5. CVE-2025-27007 WordPress SureTriggers <= 1.0.82 - Privilege Escalation Vulnerability

   Published 2025-05-01

   Critical·CVSS 9.8 EPSS 54.2% Framework module Public exploit

   Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through <= 1.0.82.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.