CVE-2021-24727
Assigner: WPScan
Published: 2021-09-13T17:56:42
State: PUBLISHED
affected: product: WP Block and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection Plugin StopBadBots
vendor: Unknown
versions: lessThan: 6.60
status: affected
version: 6.60
versionType: custom
credits: value: Martin Vierula of Trustwave
descriptions: value: The StopBadBots WordPress plugin before 6.60 did not validate or escape the order and orderby GET parameter in some of its admin dashboard pages, leading to Authenticated SQL Injections
problemTypes: descriptions: cweId: CWE-89
description: CWE-89 SQL Injection
type: CWE
source: discovery: UNKNOWN
title: Block and Stop Bad Bots < 6.60 - Authenticated SQL Injections
x_generator: WPScan CVE Generator