CVE-2021-24191

The WP Content Copy Protection & No Right Click plugin before version 3.1.5 contains a vulnerability in its AJAX handler that allows authenticated users with low privileges to install arbitrary plugins from the WordPress repository and activate them on the affected site, potentially enabling attackers to introduce malicious code or known vulnerabilities that could result in remote code execution.

Based on public CVE data (MITRE/NVD).