What is CVE-2025-48166?

CVE-2025-48166 is a medium-severity vulnerability in Sminozzi Stop And Block Bots Plugin Anti, classified under Missing Authorization. CVSS score: 5.3/10. Published 2025-07-16.

How severe is CVE-2025-48166?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Auth bypass in Sminozzi Stop And Block Bots Plugin Anti

CVE-2025-48166

Missing Authorization vulnerability in sminozzi Stop and Block bots plugin Anti bots antibots allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Stop and Block bots plugin Anti bots: from n/a through <= 1.48.

Vulnerability class: Broken Access Control

EPSS: 0.003 (18.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Sminozzi Stop And Block Bots Plugin Anti — versions 0

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

audit@patchstack.com (vdb-entry)

Frequently asked questions

What is CVE-2025-48166?: CVE-2025-48166 is a medium-severity vulnerability in Sminozzi Stop And Block Bots Plugin Anti, classified under Missing Authorization. CVSS score: 5.3/10. Published 2025-07-16.
How severe is CVE-2025-48166?: Medium severity. CVSS v3 base score is 5.3 out of 10.