WordPress plugin

Better Robots.txt – AI-Ready Crawl Control & Bot Governance security & vulnerabilities

Q: Does Better Robots.txt – AI-Ready Crawl Control & Bot Governance have known vulnerabilities?

Yes. VulnCrest Radar lists 3 known vulnerabilities in Better Robots.txt – AI-Ready Crawl Control & Bot Governance: 1 high, 2 medium. At least one is not fixed in the latest version.

Q: How do I check which version of Better Robots.txt – AI-Ready Crawl Control & Bot Governance I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

Q: What is the most recent Better Robots.txt – AI-Ready Crawl Control & Bot Governance vulnerability?

CVE-2023-25706, published Feb 14, 2023: Robots.txt optimization <= 1.4.5 - Cross Site Request Forgery. Severity: Medium (CVSS 5.4).

Q: Is any Better Robots.txt – AI-Ready Crawl Control & Bot Governance vulnerability listed in CISA KEV?

No. None of the known Better Robots.txt – AI-Ready Crawl Control & Bot Governance vulnerabilities is currently listed in the CISA KEV catalog.

better-robots-txt— active installsLast vulnerability Feb 14, 2023

Unpatched vulnerability in the latest version

At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.

Watch plugin

3Known vulnerabilities

Critical0
High1
Medium2
Low0

Vulnerabilities per year

All Better Robots.txt – AI-Ready Crawl Control & Bot Governance vulnerabilities

Better Robots.txt – AI-Ready Crawl Control & Bot Governance vulnerabilities
Severity	Vulnerability	CVE	Published
Medium5.4	Cross Site Request Forgery ≤1.4.5Update to 1.4.6	CVE-2023-25706	Feb 14, 2023
Medium6.3	Missing Authorization Checks all versionsNo patch available	CVE-2022-4974	Mar 4, 2022
High8.8	Missing Authorization to Arbitrary Options Update <3.1.7Update to 3.1.7	—	Feb 25, 2019

Medium5.4
Cross Site Request Forgery
≤1.4.5Update to 1.4.6
CVE-2023-25706Feb 14, 2023
Medium6.3
Missing Authorization Checks
all versionsNo patch available
CVE-2022-4974Mar 4, 2022
High8.8
Missing Authorization to Arbitrary Options Update
<3.1.7Update to 3.1.7
3fda31fa-efc9-44b9-99ba-9e3e23aa2ee0Feb 25, 2019

Better Robots.txt – AI-Ready Crawl Control & Bot Governance: common questions

Does Better Robots.txt – AI-Ready Crawl Control & Bot Governance have known vulnerabilities?

Yes. VulnCrest Radar lists 3 known vulnerabilities in Better Robots.txt – AI-Ready Crawl Control & Bot Governance: 1 high, 2 medium. At least one is not fixed in the latest version.

How do I check which version of Better Robots.txt – AI-Ready Crawl Control & Bot Governance I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Better Robots.txt – AI-Ready Crawl Control & Bot Governance vulnerability?

CVE-2023-25706, published Feb 14, 2023: Robots.txt optimization <= 1.4.5 - Cross Site Request Forgery. Severity: Medium (CVSS 5.4).

Is any Better Robots.txt – AI-Ready Crawl Control & Bot Governance vulnerability listed in CISA KEV?

No. None of the known Better Robots.txt – AI-Ready Crawl Control & Bot Governance vulnerabilities is currently listed in the CISA KEV catalog.