CVE-2026-49781

LLM-synthesized narrative grounded in this CVE's description and references.

• WordPress/Suretriggersinferred

  Range: <=1.1.27

  Package: https://wordpress.org/plugins/suretriggers
• WordPress/Ottokitllm-fuzzy

  Range: <=1.1.27

  Package: https://wordpress.org/plugins/ottokit

• patchstack.com/database/wordpress/plugin/suretriggers/vulnerability/wordpress-ottokit-plugin-1-1-27-php-object-injection-vulnerabilitynvd

• 25 WordPress Plugin CVEs Disclosed in One Day: 11 Critical Flaws Lead the Batch
  Vypr Intelligence · Jun 15, 2026
• Wordfence Intelligence Weekly WordPress Vulnerability Report (June 1, 2026 to June 7, 2026)
  Wordfence Blog · Jun 11, 2026