CVE-2021-24194

The WP Content Copy Protection & No Right Click plugin before version 3.1.5 contains a vulnerability where authenticated users with low privilege levels can exploit an AJAX action to install arbitrary plugins from the WordPress repository and activate them on the site, potentially enabling attackers to introduce vulnerable code that could result in remote code execution or other serious compromises.

Based on public CVE data (MITRE/NVD).