Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-70763
HistoryMar 30, 2022 - 12:00 a.m.

WordPress Block Bad Bots plugin SQL injection vulnerability

2022-03-3000:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
wordpress
block bad bots
sql injection
php
user agents
attackers
security

EPSS

0.002

Percentile

54.5%

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Block Bad Bots plugin version 6.88 before the SQL injection vulnerability, the vulnerability stems from the use of SQL statements before logging failure to The vulnerability is caused by the failure to properly clean and escape user agents before logging with SQL statements, which can be exploited by attackers to cause SQL injection problems.

EPSS

0.002

Percentile

54.5%