CVE-2021-25070

Publication date

2022-03-28 17:22:09

Family

WPScan

State

PUBLISHED

Description

The Block Bad Bots WordPress plugin before 6.88 does not properly sanitise and escape the User Agent before using it in a SQL statement to record logs, leading to an SQL Injection issue