Non notée
CVE-2021-24931 The Secure Copy Content Protection and Content Locking WordPress plugin before 2.8.2 does not escape the sccp_id…
Description
The Secure Copy Content Protection and Content Locking WordPress plugin before 2.8.2 does not escape the sccp_id parameter of the ays_sccp_results_export_file AJAX action (available to both unauthenticated and authenticated users) before using it in a SQL statement, leading to an SQL injection.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Secure Copy Content Protection and Content Locking 2.8 | premières → < 2.8.2 | 2.8.2 |
Autres CVE de Secure Copy Content Protection and Content Locking
Les 5 CVE de Secure Copy Content Protection and Content Locking →
CVE-2026-9269
The Secure Copy Content Protection and Content Locking WordPress plugin before 5.1.5 does not sanitise and escape some…
3.5
Faible
CVE-2024-6889
The Secure Copy Content Protection and Content Locking WordPress plugin before 4.1.7 does not sanitise and escape some…
4.8
Moyenne
CVE-2024-6888
The Secure Copy Content Protection and Content Locking WordPress plugin before 4.1.7 does not sanitise and escape some…
4.8
Moyenne
CVE-2024-6138
The Secure Copy Content Protection and Content Locking WordPress plugin before 4.0.9 does not sanitise and escape some…
6.5
Moyenne