A high-severity authentication bypass vulnerability in the OttoKit WordPress plugin (formerly SureTriggers) is under active exploitation just hours after its public disclosure, putting over 100,000 websites at risk of takeover. Tracked as CVE-2025-3102, the flaw allows attackers to create unauthorized administrator accounts, potentially compromising entire sites. Key Details of the Vulnerability Timeline of Events Contested…