CVE-2025-9376mediumCWE-863

CVE-2025-9376: medium-severity vulnerability in sminozzi Block Bad Bots and Stop Bad Bots…

Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection <= 11.58 - Insufficient Authorization to Unauthenticated Blocklist Bypass

Published · Updated

Follow this CVE+ Monitor Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.4%
The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin for WordPress is vulnerable to unauthorized access of data due to an insufficient capability check on the 'stopbadbots_check_wordpress_logged_in_cookie' function in all versions up to, and including, 11.58. This makes it possible for unauthenticated attackers to bypass blocklists, rate limits, and other plugin functionality.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Affected products
sminozzi · Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection
Related CVEs — sminozzi Block Bad Bots and Stop Bad Bots…

In the same product, most dangerous first.

CVE-2024-4355MEDIUMBlock Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection <= 10.23 - Missing Authorization to Information ExpsoureEPSS 0.3%