Medium · 5.3 CVE-2025-48166 EUVD-2025-21651GHSA-cw3v-hjf3-hh9j

WordPress Stop and Block bots plugin Anti bots <= 1.48 - Broken Access Control Vulnerability

Published Jul 16, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: sminozzi Product: Stop and Block bots plugin Anti bots

Description

Missing Authorization vulnerability in sminozzi Stop and Block bots plugin Anti bots antibots allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Stop and Block bots plugin Anti bots: from n/a through <= 1.48.

Affected products

Vendor	Product	Affected	Fixed
sminozzi	Stop and Block bots plugin Anti bots	≤ 1.48	—

References

https://patchstack.com/database/Wordpress/Plugin/antibots/vulnerability/wordpress-stop-and-block-bots-plugin-anti-bots-1-48-broken-access-control-vulnerability?_s_id=cve vdb-entry