CVE-2026-110372: WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress OttoKit pluginto a version that resolves this vulnerability.Fixed in 1.1.41
Event History
Frequently Asked Questions
Who can exploit this issue?
The CVSS vector indicates exploitation is possible remotely over the network, requires no privileges, and requires no user interaction. An unauthenticated attacker may be able to exploit an affected OttoKit installation.
Which versions are affected?
OttoKit versions through 1.1.40 are affected. The available information does not identify a fixed version.
What is the potential impact?
The vulnerability is rated critical with a CVSS score of 9.8 and may allow privilege escalation. Its listed impacts include high confidentiality, integrity, and availability impact.