VDB
CVE-2025-27007
CVE-2025-27007
PUBLISHED
CVSS 9.800000190734863 CRITICAL
Incorrect Privilege Assignment vulnerability in Brainstorm Force SureTriggers allows Privilege Escalation.This issue affects SureTriggers: from n/a through 1.0.82.
EPSS 81.47% · 99.2th percentile
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
81.47%
99.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Brainstorm Force | SureTriggers | n/a |
| Brainstorm Force | OttoKit | 0 |
Timeline
- Jan 21, 1970 VulnCheck XDB Entry
- Apr 30, 2025 VulnCheck KEV Exploitation
- May 1, 2025 EPSS Score
- May 1, 2025 CVE Published
- May 1, 2025 PoC Published
- May 5, 2025 VulnCheck KEV Exploitation
- May 6, 2025 VulnCheck KEV Exploitation
- May 6, 2025 PoC Published
- May 7, 2025 PoC Published
- May 7, 2025 PoC Published
- May 7, 2025 PoC Published
- May 8, 2025 PoC Published
References
- https://patchstack.com/database/wordpress/plugin/suretriggers/vulnerability/wordpress-suretriggers-1-0-82-privilege-escalation-vulnerability?_s_id=cve vdb
- https://patchstack.com/articles/additional-critical-ottokit-formerly-suretriggers-vulnerability-patched?_s_id=cve third-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-27007 advisory
- https://patchstack.com/database/Wordpress/Plugin/suretriggers/vulnerability/wordpress-suretriggers-1-0-82-privilege-escalation-vulnerability?_s_id=cve technical