Skip to content
OpenAdvisories

Vendor

sminozzi

17 known vulnerabilities.

Products

Database Backup and Table Integrity Check with Automated Scheduling 3 Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection 2 reCAPTCHA for all 2 Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan 2 WP Tools 2 Car Dealer 1 Memory Usage, Memory Limit, PHP and Server Memory Health Check and Provide Suggestions 1 Stop and Block bots plugin Anti bots 1 Site Checkup Debug AI Troubleshooting with Wizard and Tips for Each Issue 1 ReportAttacks — Brute Force & Login Protection 1 Real Estate Property 2024 Create Your Own Fields and Search Bar WP Plugin 1
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-11627 Public exploit

    Site Checkup AI Troubleshooting with Wizard and Tips for Each Issue <= 1.47 - Unauthenticated Log File Poisoning

    The Site Checkup Debug AI Troubleshooting with Wizard and Tips for Each Issue plugin for WordPress is vulnerable to log file poisoning in all versions up to, and including, 1.47. This makes it possible for unauthenticated attackers to insert arbitrary content…

    sminozzi Site Checkup Debug AI Troubleshooting with Wizard and Tips for Each Issue Web / CMS
  • Medium 6.5
    CVE-2025-9376

    Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection <= 11.58 - Insufficient Authorization to Unauthenticated Blocklist Bypass

    The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin for WordPress is vulnerable to unauthorized access of data due to an insufficient capability check on the 'stopbadbots_check_wordpress_logged_in_cookie' function in all …

    sminozzi Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection Web / CMS
  • Medium 4.3
    CVE-2025-8104

    Memory Usage <= 3.98 - Cross-Site Request Forgery to Limited Plugin Installation via wpmemory_install_plugin Function

    The Memory Usage plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.98. This is due to missing nonce validation in the wpmemory_install_plugin() function. This makes it possible for unauthenticated attacke…

    sminozzi Memory Usage, Memory Limit, PHP and Server Memory Health Check and Provide Suggestions Web / CMS
  • Medium 4.3
    CVE-2025-48150

    WordPress Real Estate Property 2024 Create Your Own Fields and Search Bar WP Plugin plugin <= 4.48 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in sminozzi Real Estate Property 2024 Create Your Own Fields and Search Bar WP Plugin real-estate-right-now allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Real Estate Property 202…

    sminozzi Real Estate Property 2024 Create Your Own Fields and Search Bar WP Plugin
  • Medium 5.3
    CVE-2025-48166

    WordPress Stop and Block bots plugin Anti bots <= 1.48 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in sminozzi Stop and Block bots plugin Anti bots antibots allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Stop and Block bots plugin Anti bots: from n/a through <= 1.48.

    sminozzi Stop and Block bots plugin Anti bots
  • Medium 4.3
    CVE-2025-49273

    WordPress WP Tools plugin <= 5.24 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in sminozzi WP Tools wptools allows Cross Site Request Forgery.This issue affects WP Tools: from n/a through <= 5.24.

    sminozzi WP Tools
  • Medium 4.3
    CVE-2025-48243

    WordPress reCAPTCHA for all plugin <= 2.26 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in sminozzi reCAPTCHA for all recaptcha-for-all allows Cross Site Request Forgery.This issue affects reCAPTCHA for all: from n/a through <= 2.26.

    sminozzi reCAPTCHA for all
  • Medium 4.3
    CVE-2025-30862

    WordPress reCAPTCHA for all plugin <= 2.22 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in sminozzi reCAPTCHA for all recaptcha-for-all allows Cross Site Request Forgery.This issue affects reCAPTCHA for all: from n/a through <= 2.22.

    sminozzi reCAPTCHA for all
  • Medium 4.9
    CVE-2025-2250

    WordPress Report Brute Force Attacks and Login Protection ReportAttacks Plugins <= 2.32 - Authenticated (Admin+) SQL Injection

    The WordPress Report Brute Force Attacks and Login Protection ReportAttacks Plugins plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in all versions up to, and including, 2.32 due to insufficient escaping on the user supplied pa…

    sminozzi ReportAttacks — Brute Force & Login Protection Web / CMS
  • Medium 4.9
    CVE-2024-12850

    Database Backup and check Tables Automated With Scheduler 2024 <= 2.32 - Authenticated (Admin+) Arbitrary File Read

    The Database Backup and check Tables Automated With Scheduler 2024 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.32 via the database_backup_ajax_download() function. This makes it possible for authenticated …

    sminozzi Database Backup and Table Integrity Check with Automated Scheduling Web / CMS
  • Medium 4.3
    CVE-2024-54298

    WordPress Car Dealer plugin <= 4.46 - Broken Access Control vulnerability

    Missing Authorization vulnerability in sminozzi Car Dealer cardealer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Car Dealer: from n/a through <= 4.46.

    sminozzi Car Dealer
  • Medium 4.3
    CVE-2024-4355

    Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection <= 10.23 - Missing Authorization to Information Expsoure

    The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the stopbadbots_get_ajax_data() function in all versions up to, and inclu…

    sminozzi Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection Web / CMS
  • Medium 4.3
    CVE-2024-1861

    Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan <= 4.52 - Missing Authorization to Authenticated (Subscriber+) Table Truncation

    The Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the antihacker_truncate_scan_table() function in all ve…

    sminozzi Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan Web / CMS
  • Medium 6.5
    CVE-2024-1860

    Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan <= 4.51 - Missing Authorization to Unauthenticated IP Address Whitelist

    The Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the antihacker_add_whitelist() function in all versions…

    sminozzi Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan Web / CMS