by Kastro
Paper/Archive/CVE-2021-25070

CVE-2021-25070

Unknown Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection — WP Block and Stop Bad Bots < 6.88 - Unauthenticated SQLi

EPSS 2%CVSS 9.8
critical.is priorityof 100
45
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 75.9.759 × 2015.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The Block Bad Bots WordPress plugin before 6.88 does not properly sanitise and escape the User Agent before using it in a SQL statement to record logs, leading to an SQL Injection issue

Affected

ProductAffectedFixed inSource
Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection6.88 – < 6.886.88CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refwpscan.com/vulnerability/e00b2946-15e5-4458-9b13-2e272630a36f