Unauthorized Data Access in Block Bad Bots Plugin for WordPress
CVE-2025-9376
6.5MEDIUM
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 28 August 2025
What is CVE-2025-9376?
The Block Bad Bots and Stop Bad Bots Crawlers and Spiders plugin for WordPress suffers from a vulnerability allowing unauthorized data access. This is caused by an insufficient capability check in the 'stopbadbots_check_wordpress_logged_in_cookie' function. All versions up to and including 11.58 are affected, enabling unauthenticated attackers to bypass the plugin's blocklists, rate limits, and essential functionalities, potentially leading to serious security breaches.
Affected Version(s)
Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection * <= 11.58