CVE-2025-3102General

LOWCVSS 8.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The SureTriggers: All-in-One Automation Platform plugin for WordPress is vulnerable to an authentication bypass leading to administrative account creation due to a missing empty value check on the 'secret_key' value in the 'autheticate_user' function in all versions up to, and including, 1.0.78. This makes it possible for unauthenticated attackers to create administrator accounts on the target website when the plugin is installed and activated but not configured with an API key.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-697

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
General: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

General

1100.0%

Referenced assets1 URL

By indicator

https://cloud.projectdiscovery.io/library/CVE-2025-3102

Full discourse1 post

pdnuclei-bot@pdnuclei_bot137d
General
🚨 CVE-2025-3102 - high 🚨 SureTriggers – All-in-One Automation Platform ≤ 1.0.78 - Authentication Bypass > The SureTriggers- All-in-One Automation Platform plugin for WordPress is vulnerable t... 👾 https://cloud.projectdiscovery.io/library/CVE-2025-3102 @pdnuclei #NucleiTem...
Post summary
The tweet reports a high‑severity authentication bypass in the SureTriggers WordPress plugin (versions ≤1.0.78) but offers no PoC, exploit code, patch, or evidence of active exploitation.
0000194
952 followersView on X

Explore more

Back to dashboard