Blackhole for Bad Bots vulnerabilities
We track 1 vulnerability in Blackhole for Bad Bots products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 4, 2022.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest Blackhole for Bad Bots vulnerabilities
- 9.1 Critical severity
Blackhole for Bad Bots: Authorization Bypass Through User-Controlled Key
The Blackhole for Bad Bots WordPress plugin before 3.3.2 uses headers such as CF-CONNECTING-IP, CLIENT-IP etc to determine the IP address of requests hitting the blackhole URL, which allows them to be spoofed. This could result in blocking arbitrary IP address