OttoKit: All-in-One Automation Platform

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   OttoKit: All-in-One Automation Platform

Information

Software Type Plugin
Software Slug suretriggers (view on wordpress.org)
Software Status Active
Software Author brainstormforce
Software Website ottokit.com
Software Downloads 2,986,791
Software Active Installs 90,000
Software Record Last Updated July 16, 2026

7 Vulnerabilities

Submit a Vulnerability
OttoKit: All-in-One Automation Platform <= 1.1.27 - Unauthenticated PHP Object Injection
8.1
CVE-2026-49781
Jun 4, 2026
Researcher: daroo
OttoKit: All-in-One Automation Platform < 1.1.23 - Unauthenticated SQL Injection
7.5
CVE-2026-4935
May 11, 2026
Researcher: Drew Webber (mcdruid)
OttoKit <= 1.1.20 - Authenticated (Administrator+) SQL Injection
4.9
CVE-2026-39479
Mar 23, 2026
Researcher: timomangcut
OttoKit: All-in-One Automation Platform (Formerly SureTriggers) <= 1.0.82 - Unauthenticated Privilege Escalation
9.8
CVE-2025-27007
Apr 30, 2025
Researcher: Denver Jackson
SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User Creation
8.1
CVE-2025-3102
Apr 9, 2025
Researcher: mikemyers
SureTriggers – Connect All Your Plugins, Apps, Tools & Automate Everything! <= 1.0.46 - Authenticated (Contributor+) Stored Cross-Site Scripting via Trigger Link Shortcode
6.4
CVE-2024-5485
Jun 3, 2024
Researcher: Krzysztof Zając
SureTriggers <= 1.0.23 - Cross-Site Request Forgery
4.3
CVE-2023-49749
Dec 4, 2023
Researcher: Rafie Muhammad
Title Status CVE ID CVSS Researchers Date
OttoKit: All-in-One Automation Platform <= 1.1.27 - Unauthenticated PHP Object Injection Patched CVE-2026-49781 8.1 daroo June 4, 2026
OttoKit: All-in-One Automation Platform < 1.1.23 - Unauthenticated SQL Injection Patched CVE-2026-4935 7.5 Drew Webber (mcdruid) May 11, 2026
OttoKit <= 1.1.20 - Authenticated (Administrator+) SQL Injection Patched CVE-2026-39479 4.9 timomangcut March 23, 2026
OttoKit: All-in-One Automation Platform (Formerly SureTriggers) <= 1.0.82 - Unauthenticated Privilege Escalation Patched CVE-2025-27007 9.8 Denver Jackson April 30, 2025
SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User Creation Patched CVE-2025-3102 8.1 mikemyers April 9, 2025
SureTriggers – Connect All Your Plugins, Apps, Tools & Automate Everything! <= 1.0.46 - Authenticated (Contributor+) Stored Cross-Site Scripting via Trigger Link Shortcode Patched CVE-2024-5485 6.4 Krzysztof Zając June 3, 2024
SureTriggers <= 1.0.23 - Cross-Site Request Forgery Patched CVE-2023-49749 4.3 Rafie Muhammad December 4, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation