{"id":"CVE-2025-48166","aliases":["EUVD-2025-21651","GHSA-cw3v-hjf3-hh9j"],"status":"published","title":"WordPress Stop and Block bots plugin Anti bots \u003c= 1.48 - Broken Access Control Vulnerability","description":"Missing Authorization vulnerability in sminozzi Stop and Block bots plugin Anti bots antibots allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Stop and Block bots plugin Anti bots: from n/a through \u003c= 1.48.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00311,"percentile":0.24085,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-862"],"published":"2025-07-16T10:36:55Z","modified":"2026-06-17T09:29:15Z","products":[{"vendor":"bill minozzi","product":"stop and block bots plugin anti bots"},{"vendor":"sminozzi","product":"stop and block bots plugin anti bots"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/antibots/vulnerability/wordpress-stop-and-block-bots-plugin-anti-bots-1-48-broken-access-control-vulnerability?_s_id=cve","tags":["vdb-entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48166"},{"url":"https://patchstack.com/database/wordpress/plugin/antibots/vulnerability/wordpress-stop-and-block-bots-plugin-anti-bots-1-48-broken-access-control-vulnerability?_s_id=cve"},{"url":"https://github.com/advisories/GHSA-cw3v-hjf3-hh9j"}],"sources":{"cve":[{"id":"CVE-2025-48166","title":"WordPress Stop and Block bots plugin Anti bots \u003c= 1.48 - Broken Access Control Vulnerability","description":"Missing Authorization vulnerability in sminozzi Stop and Block bots plugin Anti bots antibots allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Stop and Block bots plugin Anti bots: from n/a through \u003c= 1.48.","status":"published","published":"2025-07-16T10:36:55.741Z","modified":"2026-04-28T16:12:53.348Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:32:41.41198Z"}],"euvd":[{"id":"EUVD-2025-21651","description":"Missing Authorization vulnerability in sminozzi Stop and Block bots plugin Anti bots antibots allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Stop and Block bots plugin Anti bots: from n/a through \u003c= 1.48.","status":"published","published":"2025-07-16T10:36:55Z","modified":"2026-04-28T16:12:53Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T19:05:40.770086Z"}],"ghsa":[{"id":"GHSA-cw3v-hjf3-hh9j","title":"Missing Authorization vulnerability in Bill Minozzi Stop and Block bots plugin Anti bots allows...","description":"Missing Authorization vulnerability in Bill Minozzi Stop and Block bots plugin Anti bots allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Stop and Block bots plugin Anti bots: from n/a through 1.48.","status":"published","published":"2025-07-16T12:30:22Z","modified":"2025-07-16T12:30:29Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T15:03:01.660442Z"}],"nvd":[{"id":"CVE-2025-48166","description":"Missing Authorization vulnerability in sminozzi Stop and Block bots plugin Anti bots antibots allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Stop and Block bots plugin Anti bots: from n/a through \u003c= 1.48.","status":"published","published":"2025-07-16T11:15:25Z","modified":"2026-06-17T09:29:15.98Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:11:18.782156Z"}]}}