CVE-2026-110372

Summary

A privilege assignment flaw in OttoKit's suretriggers allows unauthenticated users to escalate their privileges and gain full administrative access to the system. This critical vulnerability enables attackers to bypass authentication entirely and take complete control of affected installations.

Exploitability

The vulnerability is highly exploitable with no prerequisites, as it allows privilege escalation without requiring authentication or specific user context.

Blast radius

The impact could be severe across all OttoKit installations running versions 1.1.39 or earlier, potentially allowing attackers to fully compromise WordPress sites through the vulnerable trigger functionality.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to OttoKit version 1.1.41 or later to remediate this privilege assignment vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.