CVE-2026-110372

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://patchstack.com/database/wordpress/plugin/suretriggers/vulnerability/wordpress-ottokit-plugin-1-1-40-privilege-escalation-vulnerability?_s_id=cve

Weakness type (CWE)

CWE-266

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Peaked 1d ago at 1 mentions (2026-10-18); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Referenced assets1 URL

By indicator

https://severitydaily.com/ottokit-cve-2026-110372-fixed-version-1-1-41-predates-report-1-1-42/

Full discourse2 posts

ADK Cyber@ADKCyber1d
CVE-2026-110372 (CVSS 9.8) in OttoKit suretriggers allows privilege escalation through v1.1.40. Verify and apply updates to limit unauthorized access risks. via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability https://t.co/6tS0pIWoSx
0000030
99 followersView on X
Severity Daily@severitydaily1d
OttoKit's new 9.8 names 1.1.41 as the fix. 1.1.41 shipped three days before the flaw was reported; the changelog credits the researcher in 1.1.42. 90,000+ sites, no exploitation reported. https://severitydaily.com/ottokit-cve-2026-110372-fixed-version-1-1-41-predates-report-1-1-42/
0000028
33 followersView on X

Explore more

Back to dashboard