{"id":"CVE-2026-110372","published":"2026-10-18T11:16:36.580","lastModified":"2026-10-18T11:16:36.580","description":"Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-266"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/plugin/suretriggers/vulnerability/wordpress-ottokit-plugin-1-1-40-privilege-escalation-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A privilege assignment flaw in OttoKit's suretriggers allows unauthenticated users to escalate their privileges and gain full administrative access to the system. This critical vulnerability enables attackers to bypass authentication entirely and take complete control of affected installations.","exploitability":"The vulnerability is highly exploitable with no prerequisites, as it allows privilege escalation without requiring authentication or specific user context.","blast_radius":"The impact could be severe across all OttoKit installations running versions 1.1.39 or earlier, potentially allowing attackers to fully compromise WordPress sites through the vulnerable trigger functionality.","remediation":"Upgrade to OttoKit version 1.1.41 or later to remediate this privilege assignment vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["privilege-escalation","wordpress","plugin-vulnerability"],"model":"garnet-coder","analyzedAt":"2026-10-18T15:46:35.468Z"}}