title: WP Block and Stop Bad Bots < 6.88 - Unauthenticated SQLi
description: The Block Bad Bots WordPress plugin before 6.88 does not properly sanitise and escape the User Agent before using it in a SQL statement to record logs, leading to an SQL Injection issue
problem types: CWE-89 SQL Injection
affected:
{
product: Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection
vendor: Unknown
versions:
lessThan: 6.88, status: affected, version: 6.88, versionType: custom
}