WordPress SureTriggers (aka OttoKit) Combined Auth Bypass (CVE-2025-3102, CVE-2025-27007)

MetasploitMetasploit exploitRubyexploit_multi/http/wp_suretriggers_auth_bypass

PoC files

1 file

File viewing is interactive and short-lived. Downloads are password-protected ZIP archives using password eip.

Metasploit

Linked vulnerabilities

2