CVE-2022-0949

CRITICAL 9.8CVE-2022-0949 · Published 11/04/2022 · updated 17/06/2026

In short

CVE-2022-0949 is a CRITICAL (CVSS 9.8) vulnerability affecting block and stop bad bots (stopbadbots).
Chance of exploitation in the next 30 days (EPSS): 7.7%, higher than 94.6% of all vulnerabilities.
Fix: update to 6.930 or later.

Package	Affected versions	Patched versions
block and stop bad bots stopbadbots	`< 6.930`	`6.930`

Description

The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection WordPress plugin before 6.930 does not properly sanitise and escape the fingerprint parameter before using it in a SQL statement via the stopbadbots_grava_fingerprint AJAX action, available to unauthenticated users, leading to a SQL injection

References

wpscan.com/vulnerability/a0fbb79a-e160-49df-9cf2-18ab64ea66cb · Exploit

More vulnerabilities in block and stop bad bots

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free