Skip to content
OpenAdvisories
Unscored CVE-2021-25070 EUVD-2021-11982GHSA-4qw3-m7w5-cr2v

WP Block and Stop Bad Bots < 6.88 - Unauthenticated SQLi

Published Mar 28, 2022 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The Block Bad Bots WordPress plugin before 6.88 does not properly sanitise and escape the User Agent before using it in a SQL statement to record logs, leading to an SQL Injection issue

Affected products

VendorProductAffectedFixed
— Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection 6.88 – < 6.88 6.88

References