Wp Content Copy Protection & No Right Click

wp_content_copy_protection_&_no_right_click

Vendor: Wp Buy • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-6693 1Wp Buy 1Wp Content Copy Protection & No Right Click Jun 11, 2025 May 15, 2025 N/A· v4 4.8 MEDIUM· v3 N/A· v2 The wccp-pro WordPress plugin before 15.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_ht...Show more The wccp-pro WordPress plugin before 15.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)Show less
CVE-2024-6690 1Wp Buy 1Wp Content Copy Protection & No Right Click Jun 11, 2025 May 15, 2025 N/A· v4 6.1 MEDIUM· v3 N/A· v2 The wccp-pro WordPress plugin before 15.3 contains an open-redirect flaw via the referrer parameter, allowing redirection of users to external sites
CVE-2024-49306 1Wp Buy 1Wp Content Copy Protection & No Right Click Apr 23, 2026 Oct 20, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Cross-Site Request Forgery (CSRF) vulnerability in wp-buy WP Content Copy Protection & No Right Click wp-content-copy-protector allows Cross Site Request Forgery.This issue affects WP Content Copy Protection & No Right C...Show more Cross-Site Request Forgery (CSRF) vulnerability in wp-buy WP Content Copy Protection & No Right Click wp-content-copy-protector allows Cross Site Request Forgery.This issue affects WP Content Copy Protection & No Right Click: from n/a through <= 3.5.9.Show less
CVE-2023-36678 1Wp Buy 1Wp Content Copy Protection & No Right Click Nov 21, 2024 Aug 5, 2023 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP-buy WP Content Copy Protection & No Right Click plugin <= 3.5.5 versions.
CVE-2022-23983 1Wp Buy 1Wp Content Copy Protection & No Right Click Nov 21, 2024 Feb 21, 2022 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Cross-Site Request Forgery (CSRF) vulnerability leading to plugin Settings Update discovered in WP Content Copy Protection & No Right Click WordPress plugin (versions <= 3.4.4).
CVE-2021-24188 1Wp Buy 1Wp Content Copy Protection & No Right Click Nov 21, 2024 May 14, 2021 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the WP Content Copy Protection & No Right Click WordPress plugin before 3.1.5, to install any plugin (including a specific version...Show more Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the WP Content Copy Protection & No Right Click WordPress plugin before 3.1.5, to install any plugin (including a specific version) from the WordPress repository, as well as activate arbitrary plugin from then blog, which helps attackers install vulnerable plugins and could lead to more critical vulnerabilities like RCE.Show less