CVE-2021-25070

WP Block and Stop Bad Bots < 6.88 - Unauthenticated SQLi

EPSS 1.6%CWE-89

The Block Bad Bots WordPress plugin before 6.88 does not properly sanitise and escape the User Agent before using it in a SQL statement to record logs, leading to an SQL Injection issue

Produtos afetados

Unknown · Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://wpscan.com/vulnerability/e00b2946-15e5-4458-9b13-2e272630a36f