Now officially on WordPress.org

CVE Database / CVE-2021-24192

CVE · High

CVE-2021-24192 — WP Content Copy Protection & No Right Click [wp-content-copy-protector] < 3.1.5

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2021-24188, CVE-2021-24189, CVE-2021-24190, CVE-2021-24191, CVE-2021-24192, CVE-2021-24193, CVE-2021-24194, CVE-2021-24195 WP Content Copy Protection & No Right Click [wp-content-copy-protector] < 3.1.5 Improper Authorization High 8.8 < 3.1.5 3.1.5 2021-04-22 —

CVE-2021-24188, CVE-2021-24189, CVE-2021-24190, CVE-2021-24191, CVE-2021-24192, CVE-2021-24193, CVE-2021-24194, CVE-2021-24195

The WP Content Copy Protection & No Right Click plugin before version 3.1.5 contains a vulnerability in its AJAX action 'cp_plugins_do_button_job_later_callback' that allows users with minimal privileges to install any plugin from the WordPress repository and activate arbitrary plugins on the site. This flaw could enable attackers to deploy vulnerable plugins or achieve remote code execution by installing malicious code through this mechanism.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings