CVE-2025-27007

WordPress SureTriggers <= 1.0.82 - Privilege Escalation Vulnerability

Incorrect Privilege Assignment vulnerability in Brainstorm Force SureTriggers allows Privilege Escalation.This issue affects SureTriggers: from n/a through 1.0.82.

Affected

Brainstorm Force · OttoKit

CVSS v3.1 PATCHSTACK

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

54.19% chance of exploitation in the next 30 days, 99th percentile

Nuclei

critical · CWE-266

Published

2025-05-01

Updated

2026-04-28

Proof-of-concept exploits (1)

• absholi7ly/CVE-2025-27007-OttoKit-exploit2★ · 2025-05-07

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27007.yaml

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_suretriggers_auth_…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/52286

References

• CVE Record
• NVD entry

Related

• CVE-2023-20048
• CVE-2023-50029
• CVE-2024-21683
• CVE-2024-30056
• CVE-2024-32113
• CVE-2024-32459