WordPress plugin
Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 10 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical3
- High1
- Medium6
- Low0
All Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.5 | Insufficient Authorization to Unauthenticated Blocklist Bypass ≤11.58Update to 11.59 | CVE-2025-9376 | |
| Medium4.3 | Missing Authorization to Information Expsoure ≤10.23Update to 10.24 | CVE-2024-4355 | |
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting ≤7.31Update to 7.32 | CVE-2023-32496 | |
| Medium6.5 | Missing Authorization to Arbitrary Plugin Installation ≤7.23Update to 7.24 | CVE-2022-3883 | |
| Critical9.8 | SQL Injection <6.930Update to 6.930 | CVE-2022-0949 | |
| Critical9.8 | SQL Injection <6.88Update to 6.90 | CVE-2021-25070 | |
| Critical9.8 | Unauthenticated SQL Injection <6.67Update to 6.67 | CVE-2021-24863 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤6.61Update to 6.62 | — | |
| Medium6.1 | Reflected Cross-Site Scripting <6.67Update to 6.67 | — | |
| High8.8 | Authenticated SQL Injection <6.60Update to 6.60 | CVE-2021-24727 |
- Medium6.5Insufficient Authorization to Unauthenticated Blocklist Bypass
≤11.58Update to 11.59
- Medium4.3Missing Authorization to Information Expsoure
≤10.23Update to 10.24
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤7.31Update to 7.32
- Medium6.5Missing Authorization to Arbitrary Plugin Installation
≤7.23Update to 7.24
- Critical9.8SQL Injection
<6.930Update to 6.930
- Critical9.8SQL Injection
<6.88Update to 6.90
- Critical9.8Unauthenticated SQL Injection
<6.67Update to 6.67
- Medium6.1Reflected Cross-Site Scripting
≤6.61Update to 6.62
- Medium6.1Reflected Cross-Site Scripting
<6.67Update to 6.67
- High8.8Authenticated SQL Injection
<6.60Update to 6.60
Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection: common questions
Does Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection have known vulnerabilities?
Yes. VulnCrest Radar lists 10 known vulnerabilities in Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection: 3 critical, 1 high, 6 medium. None are known to affect version null.
How do I check which version of Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection vulnerability?
CVE-2025-9376, published Aug 27, 2025: Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection <= 11.58 - Insufficient Authorization to Unauthenticated Blocklist Bypass. Severity: Medium (CVSS 6.5).
Is any Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection vulnerability listed in CISA KEV?
No. None of the known Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection vulnerabilities is currently listed in the CISA KEV catalog.