CVE-2026-4935 — SureTriggers < 1.1.23 – Unauthenticated SQLi

CVE-2026-4935

SureTriggers < 1.1.23 – Unauthenticated SQLi PUBLISHED

Description (CNA)

The OttoKit: All-in-One Automation Platform WordPress plugin before 1.1.23 does not properly sanitize user input before using it in a SQL statement, which could allow unauthenticated attackers to perform SQL injection attacks.

Affected (CNA)

Vendor / product	Versions
Unknown / OttoKit: All-in-One Automation Platform	affected 0 before 1.1.23

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/54bc1bf4-1033-49e2-aff9-a14c834c35bd/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.