
A critical security vulnerability has been identified in the OttoKit WordPress plugin, formerly known as SureTriggers, sparking concerns about the safety of over 100,000 active installations. The vulnerability, tracked as CVE-2025-3102, allows unauthorized attackers to create administrator accounts on certain unconfigured websites, granting them full control. With a CVSS score of 8.1, this authorization bypass flaw primarily stems from the










