{
 "id": "WPSEC-2026-1053",
 "url": "https://wpsec.com/vuln/WPSEC-2026-1053/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-1053/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-1053/index.md",
 "title": "OttoKit: All-in-One Automation Platform <= 1.1.41 - Unauthenticated Authentication Bypass via Denied Connection Token",
 "description": "The OttoKit: All-in-One Automation Platform plugin for WordPress is vulnerable to Authentication Bypass via the plugin's automation REST API endpoints in all versions up to, and including, 1.1.41. This is due to the plugin saving the fixed, publicly known string 'connection-denied' as the site's API secret when an administrator denies the OttoKit SaaS connection, and the 'autheticate_user' permission callback then accepting that value as a valid secret. This makes it possible for unauthenticated attackers to authenticate to the automation endpoints (such as automation/action) and run privileged automation actions on the site. Exploitation requires that the SaaS connection was denied on the target site and no valid connection has been made since.",
 "plugin": {
  "slug": "suretriggers",
  "name": "OttoKit: All-in-One Automation Platform",
  "full_name": "OttoKit: All-in-One Automation Platform",
  "wordpress_org": "https://wordpress.org/plugins/suretriggers/",
  "advisories_url": "https://wpsec.com/vuln/plugin/suretriggers/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/suretriggers"
 },
 "type": "AUTHBYPASS",
 "cwe": [
  "CWE-1391"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 8.1,
  "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "severity": "High"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "1.1.42",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 1.1.42"
  ]
 },
 "introduced_in": null,
 "fixed_in": "1.1.42",
 "remediation": "Update to 1.1.42 or later.",
 "fix_released": "2026-10-15T07:08:03+00:00",
 "published": "2026-10-16T10:47:15+00:00",
 "updated": "2026-10-16T09:50:14.246435+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-1053/",
  "https://plugins.svn.wordpress.org/suretriggers/tags/1.1.42/",
  "https://wordpress.org/plugins/suretriggers/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/suretriggers",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Medium",
  "affected_versions": "Medium",
  "as_of": "2026-10-16"
 }
}