CVE-2021-24863

CRITICAL 9.8CVE-2021-24863 · Published 13/12/2021 · updated 17/06/2026

In short

CVE-2021-24863 is a CRITICAL (CVSS 9.8) vulnerability affecting stop bad bots (billminozzi).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 76.2% of all vulnerabilities.
Fix: update to 6.67 or later.

Package	Affected versions	Patched versions
stop bad bots billminozzi	`< 6.67`	`6.67`

Description

The WP Block and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection Plugin StopBadBots WordPress plugin before 6.67 does not sanitise and escape the User Agent before using it in a SQL statement to save it, leading to a SQL injection

References

wpscan.com/vulnerability/1e4dd002-6c96-44f9-bd55-61359265f7ae · Exploit

More vulnerabilities in stop bad bots

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free