CVE-2021-25070

The Block Bad Bots WordPress plugin before 6.88 does not properly sanitise and escape the User Agent before using it in a SQL statement to record logs, leading to an SQL Injection issue...

CVE-2021-25070

creationtimestamp| type| source ---|---|--- 2022-03-28 22:41:55+00:00| seen| https://t.me/cibsecurity/39666...

CVE-2021-25070

The vulnerability CVE-2021-25070 affects the WordPress Block Bad Bots plugin (versions before 6.88). The issue arises because the plugin does not properly sanitise and escape the User Agent before using it in a SQL statement to record logs, enabling SQL injection. Impact per sources is high/criti...