CVE-2021-24727: Billminozzi Stop Bad Bots

High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days.

The StopBadBots WordPress plugin before 6.60 did not validate or escape the order and orderby GET parameter in some of its admin dashboard pages, leading to Authenticated SQL Injections

Affected products

• Billminozzi Stop Bad Bots: before 6.60 (fixed in 6.60)

Published 2021-09-13. Last modified 2026-06-17.