Wp Buy Wp Content Copy Protection \& No Right Click vulnerabilities
6 vulnerabilities
Known vulnerabilities in Wp Buy Wp Content Copy Protection \& No Right Click, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-24188wordpresswp-content-copy-protector+1
EPSS score1.32%
Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the WP Content Copy Protection & No Right Click WordPress plugin before 3.1.5, to install any plugin (including a specific version) from the WordPress repository, as well as activate arbitrary plugin from then blog, which helps attackers install vulnerable plugins and could lead to more critical vulnerabilities like RCE.CVE-2022-23983wordpresswp-content-copy-protection+2EPSS score0.42%
Cross-Site Request Forgery (CSRF) vulnerability leading to plugin Settings Update discovered in WP Content Copy Protection & No Right Click WordPress plugin (versions <= 3.4.4).CVE-2024-49306wordpresswp-content-copy-protector+1EPSS score0.24%
Cross-Site Request Forgery (CSRF) vulnerability in wp-buy WP Content Copy Protection & No Right Click wp-content-copy-protector allows Cross Site Request Forgery.This issue affects WP Content Copy Protection & No Right Click: from n/a through <= 3.5.9.CVE-2024-6690unknownwccp-pro+2EPSS score0.53%
The wccp-pro WordPress plugin before 15.3 contains an open-redirect flaw via the referrer parameter, allowing redirection of users to external sitesCVE-2024-6693unknownwccp-pro+2EPSS score0.31%
The wccp-pro WordPress plugin before 15.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)CVE-2023-36678wordpresswp-content-copy-protector+1EPSS score0.40%
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP-buy WP Content Copy Protection & No Right Click plugin <= 3.5.5 versions.