“`html
A second security weakness affecting the OttoKit (previously SureTriggers) WordPress plugin has recently been exploited in real scenarios. The flaw, identified as CVE-2025-27007 (CVSS score: 9.8), is a privilege elevation issue that influences every version of the plugin up to and including version 1.0.82. “This is a result of the create_wp_connection() function lacking a capability verification and
“`