Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2021-24727

Block and Stop Bad Bots < 6.60 - Authenticated SQL Injections

The StopBadBots WordPress plugin before 6.60 did not validate or escape the order and orderby GET parameter in some of its admin dashboard pages, leading to Authenticated SQL Injections

CVSS 3.1 · 8.8 High EPSS 1.7% KEV · Not listed
Vendors
Billminozzi
Products
Stop Bad Bots
CVE-2021-24863

StopBadBots < 6.67 - Unauthenticated SQL Injection

The WP Block and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection Plugin StopBadBots WordPress plugin before 6.67 does not sanitise and escape the User Agent before using it in a SQL statement to save it, leading to a SQL injection

CVSS 3.1 · 9.8 Critical EPSS 1.6% KEV · Not listed
Vendors
Billminozzi
Products
Stop Bad Bots