Billminozzi develops a focused line of WordPress-oriented security and bot-mitigation plugins—including Anti Hacker, Stop Bad Bots, and WP Tools—that protect against abuse and access control threats on widely deployed content-management platforms. Vulnerabilities affecting this vendor skew toward serious outcomes and center on access-control and input-validation weaknesses, particularly missing authorization checks, SQL injection, and cross-site request forgery, which are characteristic of web-application plugins operating in a high-privilege context. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Billminozzi over time
Signals from CVEs in this vendor scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-24863CRITICAL The WP Block and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection Plugin StopBadBots WordPress plugin before 6.67 does not sanitise and escape the User Agent before usin | Dec 13, 2021 | 9.8 | 30 | NO | NO |
CVE-2022-43453HIGH Missing Authorization vulnerability in Bill Minozzi WP Tools.This issue affects WP Tools: from n/a through 3.41. | Jun 21, 2024 | 8.8 | 27 | NO | NO |
CVE-2021-24727HIGH The StopBadBots WordPress plugin before 6.60 did not validate or escape the order and orderby GET parameter in some of its admin dashboard pages, leading to Authenticated SQL Injec | Sep 13, 2021 | 8.8 | 27 | NO | NO |
CVE-2023-50858HIGH Cross-Site Request Forgery (CSRF) vulnerability in Bill Minozzi Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan.This issue affects Disabl | Dec 28, 2023 | 8.8 | 24 | NO | NO |
CVE-2024-1860MEDIUM The Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan plugin for WordPress is vulnerable to unauthorized modification of data due to a miss | Feb 28, 2024 | 5.3 | 17 | NO | NO |
CVE-2024-1861MEDIUM The Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan plugin for WordPress is vulnerable to unauthorized modification of data due to a miss | Feb 28, 2024 | 4.3 | 16 | NO | NO |
Signals from CVEs in this vendor scope (6 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Billminozzi.
Media articles that mention a CVE ID that affects a product developed by Billminozzi — matched by CVE ID, not by vendor name.