Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection

Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection has 10 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2025; all 10 are fixed as of September 2026. Their average CVSS score is 7.2, and the most serious one scores 9.8 out of 10. Severity breakdown: 3 critical and 1 high. 2021 was the busiest year with 4 disclosures.

The most common weakness is SQL Injection, behind 4 of the records (40%). Other recurring categories include Cross-Site Scripting, Missing Authorization.

Every one of the 10 issues recorded for Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection has a vendor fix available, so running the current release closes all known holes.

8 independent researchers contributed these findings, most of them (2) reported by Krzysztof Zając.

Strategic Overview

Avg CVSSHigh
7.2/ 10
Patch Coverage100%
Open

0

Fixed

10

Get automatic notifications for all Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2022-0949

WP Block and Stop Bad Bots <= 6.92 - SQL Injection

Read the full analysis

Vulnerability Records

10 records
2025-08-27 00:00CVE-2025-9376
6.5
Medium
Jarno Vos (jarnovos)Yes
2024-05-29 19:55CVE-2024-4355
4.3
Medium
Krzysztof ZającYes
2023-05-09 00:00CVE-2023-32496
4.4
Medium
Taihei ShimamineYes
2022-11-18 00:00CVE-2022-3883
6.5
Medium
István MártonYes
2022-03-16 00:00CVE-2022-0949
9.8
Critical
cydaveYes
2022-03-08 00:00CVE-2021-25070
9.8
Critical
Krzysztof ZającYes
2021-11-15 00:00CVE-2021-24863
9.8
Critical
ZhongFu SuYes
2021-08-25 00:00N/A
6.1
Medium
WPScanTeamYes
2021-08-25 00:00N/A
6.1
Medium
AnonymousYes
2021-08-06 00:00CVE-2021-24727
8.8
High
Martin VierulaYes
Showing 1–10 of 10 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C