Medium · 5.9 CVE-2023-32496 EUVD-2023-36740GHSA-gwg2-8c92-5859

WordPress StopBadBots Plugin <= 7.31 is vulnerable to Cross Site Scripting (XSS)

Published Aug 23, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Bill Minozzi Product: Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Bill Minozzi Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin <= 7.31 versions.

Affected products

Vendor	Product	Affected	Fixed
Bill Minozzi	Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection	≤ 7.31	—

References

https://patchstack.com/database/vulnerability/stopbadbots/wordpress-block-bad-bots-and-stop-bad-bots-crawlers-and-spiders-and-anti-spam-protection-plugin-7-31-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry