{"vulnerability": "CVE-2025-27007", "sightings": [{"uuid": "fa7fb774-2790-40aa-ad5a-a031ebfe21d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lqvwk4lfcu2j", "content": "", "creation_timestamp": "2025-06-06T03:50:06.418474Z"}, {"uuid": "9deb2718-f24f-4e03-9c64-f4e409bb4bc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo4qb4ltxu2j", "content": "", "creation_timestamp": "2025-05-01T16:30:45.050680Z"}, {"uuid": "a297cce7-7ee8-47e4-8b54-daa6cac7fa37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lojrrae6mc26", "content": "", "creation_timestamp": "2025-05-06T21:02:19.352041Z"}, {"uuid": "428ed309-2d03-4cd1-8ea8-d22394e51d08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lollj2iuyj2r", "content": "", "creation_timestamp": "2025-05-07T14:15:39.277212Z"}, {"uuid": "cc014d90-1cda-459d-b16a-432d5f71fc62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://thehackernews.com/2025/05/ottokit-wordpress-plugin-with-100k.html", "content": "", "creation_timestamp": "2025-05-07T11:44:00.000000Z"}, {"uuid": "5c25a901-1af8-4bb6-a1ee-214ee56e9ba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lom5hfmr4l23", "content": "", "creation_timestamp": "2025-05-07T19:36:50.648860Z"}, {"uuid": "5c9d0ced-5855-4dc5-ac35-0b876fe05187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lonm5bifdr2j", "content": "", "creation_timestamp": "2025-05-08T09:32:17.094865Z"}, {"uuid": "11420e0a-7dca-4fbf-a1e6-c0cae8c0ce89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lonxbkqr6c2t", "content": "", "creation_timestamp": "2025-05-08T12:51:32.418420Z"}, {"uuid": "eee283bb-3331-4a86-8a75-2991cbe17308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114478983375670362", "content": "", "creation_timestamp": "2025-05-09T17:11:04.843835Z"}, {"uuid": "99e53d61-2841-4310-accc-7a00d13d13ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lpnmpgkukc2t", "content": "", "creation_timestamp": "2025-05-21T03:07:37.446789Z"}, {"uuid": "be4982d7-8499-40c6-93b3-132da5135fe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3losnmspjjf2y", "content": "", "creation_timestamp": "2025-05-10T09:42:10.842490Z"}, {"uuid": "5ef8cf1f-5f9a-4a31-8733-82b8f438f1de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lottmvote626", "content": "", "creation_timestamp": "2025-05-10T21:02:17.097065Z"}, {"uuid": "f313bd3f-5865-4908-b0c0-848a05eee673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-27007.yaml", "content": "", "creation_timestamp": "2025-05-13T10:08:41.000000Z"}, {"uuid": "6ec93a4e-76b3-469f-8cc7-834d0a81fdab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lp5vionrhf2l", "content": "", "creation_timestamp": "2025-05-14T21:02:26.862884Z"}, {"uuid": "27f973b2-a56d-4840-b3c9-b17be36e21bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "bceb1c1f-bedd-4cda-843d-948ee5421242", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_suretriggers_auth_bypass.rb", "content": "", "creation_timestamp": "2025-05-13T16:01:34.000000Z"}, {"uuid": "a47cbbb1-e9c0-4e4c-b4a3-f01b471c96b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14257", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27007\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Incorrect Privilege Assignment vulnerability in Brainstorm Force SureTriggers allows Privilege Escalation.This issue affects SureTriggers: from n/a through 1.0.82.\n\ud83d\udccf Published: 2025-05-01T10:54:56.209Z\n\ud83d\udccf Modified: 2025-05-01T10:54:56.209Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/suretriggers/vulnerability/wordpress-suretriggers-1-0-82-privilege-escalation-vulnerability?_s_id=cve", "creation_timestamp": "2025-05-01T11:14:47.000000Z"}, {"uuid": "f54d62f0-4f26-475c-a5fd-f8bd33943a9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://t.me/cvedetector/24205", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27007 - Brainstorm Force SureTriggers Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27007 \nPublished : May 1, 2025, 11:15 a.m. | 1\u00a0hour ago \nDescription : Incorrect Privilege Assignment vulnerability in Brainstorm Force SureTriggers allows Privilege Escalation.This issue affects SureTriggers: from n/a through 1.0.82. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-01T14:49:50.000000Z"}, {"uuid": "17f1cdd8-8311-4b5a-b4a3-90081e73b035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "exploited", "source": "Telegram/O5Zvd0-ca5HrJAxxnw-Wgx96yQdbDg19VT0Mm7IwVclSRw", "content": "", "creation_timestamp": "2025-05-07T16:17:43.000000Z"}, {"uuid": "d31fbba0-72a7-4ce1-b181-9d7979ca83a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "published-proof-of-concept", "source": "Telegram/WavE4TZalmMZH7ia3WHjEDQ1oei-w86-O_mAcu597Ww1-5E", "content": "", "creation_timestamp": "2025-05-01T14:00:35.000000Z"}, {"uuid": "4467d231-f949-4194-96d1-44753c792a09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "exploited", "source": "https://t.me/true_secator/7019", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0438\u043b\u043e\u0441\u044c \u043d\u0430 \u0432\u0442\u043e\u0440\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 OttoKit \u0434\u043b\u044f WordPress \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0430\u0439\u0442\u043e\u0432 WordPress.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Defiant \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u0442\u043e\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 OttoKit, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0430 \u043c\u0435\u043d\u0435\u0435 \u0447\u0435\u043c \u0447\u0435\u0440\u0435\u0437 \u043c\u0435\u0441\u044f\u0446 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0431\u044b\u043b\u0438 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u044b \u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432.\n\n\u041f\u043b\u0430\u0433\u0438\u043d OttoKit: All-in-One Automation Platform (\u0440\u0430\u043d\u0435\u0435 SureTriggers), \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0431\u043e\u043b\u0435\u0435 100 000 \u0440\u0430\u0437, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u0430\u0439\u0442\u043e\u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u0434\u0430\u0447, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0438\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u044b \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u044b.\n\n\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u0430\u043f\u0440\u0435\u043b\u044f \u0431\u044b\u043b\u0430 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-3102\u00a0- \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0435 \u0438 \u043d\u0435\u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 OttoKit, - \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043d\u043e\u0432\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432.\n\n\u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 Defiant \u043e\u0431\u0440\u0430\u0449\u0430\u0435\u0442 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0430\u0442\u0430\u043a\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u043d\u043e\u0432\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435, CVE-2025-27007 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9,8), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0441\u0430\u0439\u0442\u0430\u043c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 create_wp_connection(), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0430 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e, \u0447\u0442\u043e\u0431\u044b \u0441\u0430\u0439\u0442 \u043d\u0438\u043a\u043e\u0433\u0434\u0430 \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u043b \u0438 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0430 OttoKit/SureTriggers \u043d\u0438\u043a\u043e\u0433\u0434\u0430 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u043b\u0441\u044f \u043a \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0443 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0430\u0440\u043e\u043b\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\u0412 \u044d\u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0436\u0435\u0442 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u0434\u0430\u0436\u0435 \u043d\u0435 \u0437\u043d\u0430\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0441\u0430\u0439\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0436\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u043b\u0438\u0441\u044c \u043a \u043f\u043b\u0430\u0433\u0438\u043d\u0443 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0430\u0440\u043e\u043b\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u043d\u0435 \u0434\u043e\u043b\u0436\u043d\u044b \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439.", "creation_timestamp": "2025-05-07T19:00:09.000000Z"}, {"uuid": "caa7bd83-f986-4000-8006-57cbed7702f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://t.me/brutsecurity/1869", "content": "CVE-2025-27007: Privilege Escalation in OttoKit WordPress Plugin, 9.8 rating \ud83d\udd25\n\nErrors in the logic of the plugin's API could potentially lead to an attacker gaining access to the administrator account. According to Patchstack, exploitation of the vulnerability began just an hour after public disclosure!\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/y4FXX\n\ud83d\udc49 Dork: http.body:\"plugins/suretriggers\"\n\nRead more: https://patchstack.com/database/wordpress/plugin/suretriggers/vulnerability/wordpress-suretriggers-1-0-82-privilege-escalation-vulnerability?_s_id=cve", "creation_timestamp": "2026-07-09T03:00:08.368241Z"}, {"uuid": "48922175-2f34-4e52-8d7d-17cb694e5072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://t.me/brutsecurity/1869", "content": "CVE-2025-27007: Privilege Escalation in OttoKit WordPress Plugin, 9.8 rating \ud83d\udd25\n\nErrors in the logic of the plugin's API could potentially lead to an attacker gaining access to the administrator account. According to Patchstack, exploitation of the vulnerability began just an hour after public disclosure!\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/y4FXX\n\ud83d\udc49 Dork: http.body:\"plugins/suretriggers\"\n\nRead more: https://patchstack.com/database/wordpress/plugin/suretriggers/vulnerability/wordpress-suretriggers-1-0-82-privilege-escalation-vulnerability?_s_id=cve", "creation_timestamp": "2026-07-10T00:00:31.883461Z"}, {"uuid": "6aa3273a-5948-49b0-833f-aef5c5f6b00b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "exploited", "source": "https://t.me/brutsecurity/1869", "content": "CVE-2025-27007: Privilege Escalation in OttoKit WordPress Plugin, 9.8 rating \ud83d\udd25\n\nErrors in the logic of the plugin's API could potentially lead to an attacker gaining access to the administrator account. According to Patchstack, exploitation of the vulnerability began just an hour after public disclosure!\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/y4FXX\n\ud83d\udc49 Dork: http.body:\"plugins/suretriggers\"\n\nRead more: https://patchstack.com/database/wordpress/plugin/suretriggers/vulnerability/wordpress-suretriggers-1-0-82-privilege-escalation-vulnerability?_s_id=cve", "creation_timestamp": "2026-07-11T13:00:05.479442Z"}, {"uuid": "6c9d4c3b-9520-4f44-8121-7f569d072545", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "exploited", "source": "https://t.me/brutsecurity/1869", "content": "CVE-2025-27007: Privilege Escalation in OttoKit WordPress Plugin, 9.8 rating \ud83d\udd25\n\nErrors in the logic of the plugin's API could potentially lead to an attacker gaining access to the administrator account. According to Patchstack, exploitation of the vulnerability began just an hour after public disclosure!\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/y4FXX\n\ud83d\udc49 Dork: http.body:\"plugins/suretriggers\"\n\nRead more: https://patchstack.com/database/wordpress/plugin/suretriggers/vulnerability/wordpress-suretriggers-1-0-82-privilege-escalation-vulnerability?_s_id=cve", "creation_timestamp": "2026-07-12T00:00:49.534644Z"}, {"uuid": "fca6f009-f68d-47a9-a195-c9fcf2932bc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27007", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_suretriggers_auth_bypass.rb", "content": "{\"actions\": [{\"description\": \"SureTriggers <= 1.0.82 auth bypass, reset & RCE\", \"name\": \"CVE-2025-27007\"}, {\"description\": \"SureTriggers <= 1.0.78 auth bypass & RCE\", \"name\": \"CVE-2025-3102\"}], \"aliases\": [], \"arch\": \"php, cmd\", \"author\": [\"Michael Mazzolini (mikemyers)\", \"Denver Jackson\", \"Khaled Alenazi (Nxploited)\", \"Valentin Lobstein\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Exploits two distinct authorization bypasses in SureTriggers/OttoKit plugin:\\n          - CVE-2025-3102: admin creation via St-Authorization Bearer (empty)\\n          - CVE-2025-27007: reset access key via connection endpoint & admin creation with Bearer header\", \"disclosure_date\": \"2025-03-13\", \"fullname\": \"exploit/multi/http/wp_suretriggers_auth_bypass\", \"is_install_path\": true, \"mod_time\": \"2026-06-02 10:32:30 +0000\", \"name\": \"WordPress SureTriggers (aka OttoKit) Combined Auth Bypass (CVE-2025-3102, CVE-2025-27007)\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/wp_suretriggers_auth_bypass.rb\", \"platform\": \"Linux,PHP,Unix,Windows\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/wp_suretriggers_auth_bypass\", \"references\": [\"CVE-2025-3102\", \"CVE-2025-27007\", \"EDB-52286\", \"URL-https://github.com/Nxploited/CVE-2025-3102\", \"URL-https://www.wordfence.com/blog/2025/04/100000-wordpress-sites-affected-by-administrative-user-creation-vulnerability-in-suretriggers-wordpress-plugin/\", \"URL-https://patchstack.com/articles/additional-critical-ottokit-formerly-suretriggers-vulnerability-patched?_s_id=cve\", \"URL-https://cloud.projectdiscovery.io/library/CVE-2025-27007\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"PHP In-Memory\", \"Unix In-Memory\", \"Windows In-Memory\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:23.120766Z"}]}