CVE-2021-24189

The WP Content Copy Protection & No Right Click plugin before version 3.1.5 contains a vulnerability that allows authenticated users with low-level permissions to exploit an AJAX function to install arbitrary plugins from the WordPress repository and activate them on the site, potentially enabling attackers to deploy malicious or vulnerable plugins that could result in remote code execution or other serious compromises.

Based on public CVE data (MITRE/NVD).