CVE-2021-24195

The wp-content-copy-protector plugin before version 3.1.5 contains an authorization flaw in its AJAX handler that allows users with low-level privileges to install arbitrary plugins from the WordPress repository and activate them without proper permission checks. An attacker could exploit this vulnerability to deploy vulnerable plugins on a target site, potentially leading to remote code execution or other serious security compromises.

Based on public CVE data (MITRE/NVD).