Skip to content
Sign in
6.5 Medium

CVE-2022-3883 The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection WordPress plugin before 7.24 does not…

Description

The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection WordPress plugin before 7.24 does not have proper authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscriber to call it and install and activate arbitrary plugins from wordpress.org

Affected products and versions

Product Affected versions Fixed in
Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection 7.24 earliest → < 7.24 7.24

Other CVEs of Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection

The 3 CVEs of Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection →
CVE-2022-0949 The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection WordPress plugin before 6.930 does… Not rated CVE-2021-25070 The Block Bad Bots WordPress plugin before 6.88 does not properly sanitise and escape the User Agent before using it… Not rated
Track this CVE