Live › vulnerability › CVE-2026-110372
Go to dashboardOttoKit, a WordPress plugin from Brainstorm Force (suretriggers), assigns privileges incorrectly, letting a low-privileged user escalate their rights. An attacker who can log in gets higher-level access to the site.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Check the installed OttoKit plugin version in the WordPress admin plugins page; versions through 1.1.40 are affected.
Update OttoKit to a version later than 1.1.40 (the sources do not name the fixed version).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40.
This page as .md · .json · in your agent: get_signal("CVE-2026-110372")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.