SQL Injection
4 records40%First: 2021. Latest: 2022.
Plugin security history
Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection Vulnerability History & Security Timeline
The Wordfence Intelligence dataset currently contains 10 vulnerability records associated with Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection, published between 2021 and 2025.
Dataset last synchronized: 2026-08-02 09:41:47 UTC
At a glance
Security Snapshot
10Total records
3Critical
1High
6Medium
0Low
0Informational
10Patched records
0Currently marked unpatched
2021-08-06First disclosure
2025-08-27Latest disclosure
8 of 10CVE coverage
Year-by-Year Timeline
| Year | Records | Relative volume |
|---|---|---|
| 2021 | 4 | |
| 2022 | 3 | |
| 2023 | 1 | |
| 2024 | 1 | |
| 2025 | 1 |
Severity Breakdown
| Severity | Records | Share |
|---|---|---|
| Critical | 3 | 30% |
| High | 1 | 10% |
| Medium | 6 | 60% |
Vulnerability-Type Breakdown
Cross-Site Scripting
3 records30%First: 2021. Latest: 2023.
Missing Authorization
3 records30%First: 2022. Latest: 2025.
Patch Status
- Patched
- 10
- Currently marked unpatched
- 0
- Unknown status
- 0
Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.
Latest Known Patched Versions
11.5910.247.327.246.9306.906.626.676.60
Affected-Version History
Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.
| Affected range | Vulnerability | Published | Patched version | Severity |
|---|---|---|---|---|
*-11.58 | Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection <= 11.58 - Insufficient Authorization to Unauthenticated Blocklist Bypass | August 27, 2025 | 11.59 | Medium |
*-10.23 | Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection <= 10.23 - Missing Authorization to Information Expsoure | May 29, 2024 | 10.24 | Medium |
*-7.31 | StopBadBots <= 7.31 - Authenticated (Administrator+) Stored Cross-Site Scripting | May 9, 2023 | 7.32 | Medium |
*-7.23 | StopBadBots <= 7.23 - Missing Authorization to Arbitrary Plugin Installation | November 18, 2022 | 7.24 | Medium |
[*, 6.930) | WP Block and Stop Bad Bots <= 6.92 - SQL Injection | March 16, 2022 | 6.930 | Critical |
[*, 6.88) | WP Block and Stop Bad Bots <= 6.88 - SQL Injection | March 8, 2022 | 6.90 | Critical |
[*, 6.67) | WP Block and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection Plugin StopBadBots < 6.67 - Unauthenticated SQL Injection | November 15, 2021 | 6.67 | Critical |
*-6.61 | Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection <= 6.61 - Reflected Cross-Site Scripting | August 25, 2021 | 6.62 | Medium |
[*, 6.67) | Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection < 6.6.7 - Reflected Cross-Site Scripting | August 25, 2021 | 6.67 | Medium |
[*, 6.60) | WP Block and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection Plugin StopBadBots < 6.60 - Authenticated SQL Injection | August 6, 2021 | 6.60 | High |
Selected source records
Latest Records
MediumCVE-2025-9376
Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection <= 11.58 - Insufficient Authorization to Unauthenticated Blocklist Bypass
Published: August 27, 2025
- Affected versions
- *-11.58
- Patched versions
- 11.59
MediumCVE-2024-4355
Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection <= 10.23 - Missing Authorization to Information Expsoure
Published: May 29, 2024
- Affected versions
- *-10.23
- Patched versions
- 10.24
MediumCVE-2023-32496
StopBadBots <= 7.31 - Authenticated (Administrator+) Stored Cross-Site Scripting
Published: May 9, 2023
- Affected versions
- *-7.31
- Patched versions
- 7.32
MediumCVE-2022-3883
StopBadBots <= 7.23 - Missing Authorization to Arbitrary Plugin Installation
Published: November 18, 2022
- Affected versions
- *-7.23
- Patched versions
- 7.24
CriticalCVE-2022-0949
WP Block and Stop Bad Bots <= 6.92 - SQL Injection
Published: March 16, 2022
- Affected versions
- [*, 6.930)
- Patched versions
- 6.930
CriticalCVE-2021-25070
WP Block and Stop Bad Bots <= 6.88 - SQL Injection
Published: March 8, 2022
- Affected versions
- [*, 6.88)
- Patched versions
- 6.90
CriticalCVE-2021-24863
WP Block and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection Plugin StopBadBots < 6.67 - Unauthenticated SQL Injection
Published: November 15, 2021
- Affected versions
- [*, 6.67)
- Patched versions
- 6.67
Medium
Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection < 6.6.7 - Reflected Cross-Site Scripting
Published: August 25, 2021
- Affected versions
- [*, 6.67)
- Patched versions
- 6.67
Highest-Severity Records
CriticalCVE-2021-25070
WP Block and Stop Bad Bots <= 6.88 - SQL Injection
Published: March 8, 2022
- Affected versions
- [*, 6.88)
- Patched versions
- 6.90
CriticalCVE-2022-0949
WP Block and Stop Bad Bots <= 6.92 - SQL Injection
Published: March 16, 2022
- Affected versions
- [*, 6.930)
- Patched versions
- 6.930
CriticalCVE-2021-24863
WP Block and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection Plugin StopBadBots < 6.67 - Unauthenticated SQL Injection
Published: November 15, 2021
- Affected versions
- [*, 6.67)
- Patched versions
- 6.67
HighCVE-2021-24727
WP Block and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection Plugin StopBadBots < 6.60 - Authenticated SQL Injection
Published: August 6, 2021
- Affected versions
- [*, 6.60)
- Patched versions
- 6.60
MediumCVE-2022-3883
StopBadBots <= 7.23 - Missing Authorization to Arbitrary Plugin Installation
Published: November 18, 2022
- Affected versions
- *-7.23
- Patched versions
- 7.24
MediumCVE-2025-9376
Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection <= 11.58 - Insufficient Authorization to Unauthenticated Blocklist Bypass
Published: August 27, 2025
- Affected versions
- *-11.58
- Patched versions
- 11.59
Medium
Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection < 6.6.7 - Reflected Cross-Site Scripting
Published: August 25, 2021
- Affected versions
- [*, 6.67)
- Patched versions
- 6.67
Medium
Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection <= 6.61 - Reflected Cross-Site Scripting
Published: August 25, 2021
- Affected versions
- *-6.61
- Patched versions
- 6.62
Need help reviewing an exposed WordPress website?
Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.
Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.
Data Source, Attribution and Methodology
This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.