Vulnerabilities

TI-2024-06202 CVE-2024-6693 · GHSA-xvf2-x5rr-6g4q

WP Content Copy Protection & No Right Click (premium) <= 15.0 - Admin+ Stored XSS

MEDIUM 55

The wccp-pro WordPress plugin before 15.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_ht…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00312 Published 2025-05-15 Fixed in 15.3 CWE-79

TI-2024-06199 CVE-2024-6690 · GHSA-qgvm-vj48-358p

WP Content Copy Protection & No Right Click (premium) < 15.3 - Open Redirect

MEDIUM 60

The wccp-pro WordPress plugin before 15.3 contains an open-redirect flaw via the referrer parameter, allowing redirection of users to external sites

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00526 Published 2025-05-15 Fixed in 15.3 CWE-601

TI-2024-32899 CVE-2024-49306 · GHSA-vpc4-q7gx-ppmw

WordPress WP Content Copy Protection & No Right Click plugin <= 3.5.9 - Cross Site Request Forgery (CSRF) vulnerability

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in wp-buy WP Content Copy Protection & No Right Click wp-content-copy-protector allows Cross Site Request Forgery.This issue affects WP Content Copy Protection & No Right C…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0024 Published 2024-10-20 No fix listed CWE-352

TI-2023-18493 CVE-2023-36678 · GHSA-7c2j-j52x-qgm9

WordPress WP Content Copy Protection & No Right Click Plugin <= 3.5.5 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP-buy WP Content Copy Protection & No Right Click plugin <= 3.5.5 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00396 Published 2023-08-05 No fix listed CWE-79

TI-2022-07946 CVE-2022-23983 · GHSA-r86j-7668-2hrf

Cross-site request forgery in wp-buy WP Content Copy Protection & No Right Click

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability leading to plugin Settings Update discovered in WP Content Copy Protection & No Right Click WordPress plugin (versions <= 3.4.4).

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00421 Published 2022-02-21 No fix listed CWE-352

TI-2021-06480 CVE-2021-24188 · GHSA-ff7w-x79r-f4xr

WP Content Copy Protection & No Right Click < 3.1.5 - Arbitrary Plugin Installation/Activation via Low Privilege User

MEDIUM 41

Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the WP Content Copy Protection & No Right Click WordPress plugin before 3.1.5, to install any plugin (including a specific version…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01325 Published 2021-05-14 Fixed in 3.1.5 CWE-285