N/A
2026-03-25< 3.8.1
Blackhole for Bad Bots <= 3.8 - Unauthenticated Stored Cross-Site Scripting via User-Agent HTTP Header
Minimum safe version
3.8.1
Update to 3.8.1 or later to address 3 fixable vulnerabilities
Blackhole for Bad Bots <= 3.8 - Unauthenticated Stored Cross-Site Scripting via User-Agent HTTP Header
WordPress Blackhole for Bad Bots plugin <= 3.3.1 - Arbitrary IP Address Blocking via IP Spoofing vulnerability
CVE-2022-1165