Not rated
CVE-2021-24931 The Secure Copy Content Protection and Content Locking WordPress plugin before 2.8.2 does not escape the sccp_id…
Description
The Secure Copy Content Protection and Content Locking WordPress plugin before 2.8.2 does not escape the sccp_id parameter of the ays_sccp_results_export_file AJAX action (available to both unauthenticated and authenticated users) before using it in a SQL statement, leading to an SQL injection.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Secure Copy Content Protection and Content Locking 2.8 | earliest → < 2.8.2 | 2.8.2 |
Other CVEs of Secure Copy Content Protection and Content Locking
The 5 CVEs of Secure Copy Content Protection and Content Locking →
CVE-2026-9269
The Secure Copy Content Protection and Content Locking WordPress plugin before 5.1.5 does not sanitise and escape some…
3.5
Low
CVE-2024-6889
The Secure Copy Content Protection and Content Locking WordPress plugin before 4.1.7 does not sanitise and escape some…
4.8
Medium
CVE-2024-6888
The Secure Copy Content Protection and Content Locking WordPress plugin before 4.1.7 does not sanitise and escape some…
4.8
Medium
CVE-2024-6138
The Secure Copy Content Protection and Content Locking WordPress plugin before 4.0.9 does not sanitise and escape some…
6.5
Medium