Skip to content
Sign in
Not rated

CVE-2021-24188 Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the WP Content Copy Protection…

Description

Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the WP Content Copy Protection & No Right Click WordPress plugin before 3.1.5, to install any plugin (including a specific version) from the WordPress repository, as well as activate arbitrary plugin from then blog, which helps attackers install vulnerable plugins and could lead to more critical vulnerabilities like RCE.

Affected products and versions

Product Affected versions Fixed in
WP Content Copy Protection & No Right Click 3.1 earliest → < 3.1.5 3.1.5

Other CVEs of WP Content Copy Protection & No Right Click

The 3 CVEs of WP Content Copy Protection & No Right Click →
CVE-2024-49306 Cross-Site Request Forgery (CSRF) vulnerability in wp-buy WP Content Copy Protection & No Right Click… 4.3 Medium CVE-2023-36678 Auth 5.9 Medium
Track this CVE