A high-severity authentication bypass vulnerability, tracked as CVE-2025-3102, has been found in the OttoKit plugin for WordPress, allowing unauthorized users to create administrative accounts and potentially take over affected websites.
View full story…