CVEs-PoC/2021/CVE-2021-25070.md

CVE-2021-25070

Description

The Block Bad Bots WordPress plugin before 6.88 does not properly sanitise and escape the User Agent before using it in a SQL statement to record logs, leading to an SQL Injection issue

POC

Reference

• https://wpscan.com/vulnerability/e00b2946-15e5-4458-9b13-2e272630a36f
• https://wpscan.com/vulnerability/e00b2946-15e5-4458-9b13-2e272630a36f

Github

No PoCs found on GitHub currently.