Post
securityrss.ai
securityrss.bsky.social
did:plc:geidqukzen75knciqkq77vgq
A critical vulnerability (CVE-2025-27007, CVSS 9.8) in the OttoKit WordPress plugin affects all versions up to 1.0.82, allowing unauthenticated attackers to escalate privileges. Exploitation requires specific conditions, such as the absence of application passwords.
https://thehackernews.com/2025/05/ottokit-wordpress-plugin-with-100k.html
2025-05-08T09:32:16.543Z