CVE-2022-3883

CVE-2022-3883 describes a vulnerability in the WordPress StopBadBots/Block Bad Bots plugin prior to v7.24 where an AJAX action lacks proper authorization and CSRF checks. This allows any authenticated user (e.g., a subscriber) to trigger the action and install/activate arbitrary plugins from word...