CVE-2024-49306
- EPSS 0.05%
- Veröffentlicht 20.10.2024 11:15:03
- Zuletzt bearbeitet 22.10.2024 18:35:46
Cross-Site Request Forgery (CSRF) vulnerability in WP-buy WP Content Copy Protection & No Right Click allows Cross Site Request Forgery.This issue affects WP Content Copy Protection & No Right Click: from n/a through 3.5.9.
CVE-2023-36678
- EPSS 0.06%
- Veröffentlicht 05.08.2023 23:15:12
- Zuletzt bearbeitet 21.11.2024 08:10:20
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP-buy WP Content Copy Protection & No Right Click plugin <= 3.5.5 versions.
CVE-2022-23983
- EPSS 0.11%
- Veröffentlicht 21.02.2022 18:15:09
- Zuletzt bearbeitet 21.11.2024 06:49:35
Cross-Site Request Forgery (CSRF) vulnerability leading to plugin Settings Update discovered in WP Content Copy Protection & No Right Click WordPress plugin (versions <= 3.4.4).
CVE-2021-24188
- EPSS 0.66%
- Veröffentlicht 14.05.2021 12:15:07
- Zuletzt bearbeitet 21.11.2024 05:52:33
Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the WP Content Copy Protection & No Right Click WordPress plugin before 3.1.5, to install any plugin (including a specific version) from the WordPress repositor...