OTX Threat: TIKTOUK: Tracing a WordPress Credential Collection Toolkit

TIKTOUK is a multi-component toolkit designed to collect credentials from WordPress sites. It consists of three components: a Python probing module that identifies WordPress installations and scans for exposed secrets, a Python collection module that extracts configuration files and database credentials, and a Go-based JavaScript crawler that harvests secrets from client-side code. The toolkit exp CVEs: CVE-2026-63030, CVE-2026-60137, CVE-2026-88771