Approved changes feed: RSS · Atom

cpe:2.3:a:ays_pro:secure_copy_content_protection_and_content_locking:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAys Pro (baec0466-3d3a-5cae-863d-5da547e565f4)
ProductSecure Copy Content Protection And Content Locking (fda34750-7145-56bd-9627-d3f40de098b3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-25335 vulnerable 2026-06-03 15:16:54.436645 WordPress Secure Copy Content Protection and Content Locking plugin <= 5.0.0 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in Ays Pro Secure Copy Content Protection and Content Locking secure-copy-content-protection allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Secure Copy Content Protection and Content Locking: from n/a through <= 5.0.0.
Published: 2026-02-19T08:26:57.707Z
Updated: 2026-04-28T16:14:55.765Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32133 vulnerable 2026-06-03 15:00:40.092364 WordPress Secure Copy Content Protection and Content Locking plugin <= 4.5.5 - Cross Site Scripting (XSS) vulnerability
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Secure Copy Content Protection and Content Locking secure-copy-content-protection allows Stored XSS.This issue affects Secure Copy Content Protection and Content Locking: from n/a through <= 4.5.5.
Published: 2025-04-04T15:58:29.039Z
Updated: 2026-04-28T16:12:16.952Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30905 vulnerable 2026-06-03 15:00:29.813205 WordPress Secure Copy Content Protection and Content Locking plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Secure Copy Content Protection and Content Locking secure-copy-content-protection allows Stored XSS.This issue affects Secure Copy Content Protection and Content Locking: from n/a through <= 4.4.3.
Published: 2025-04-01T20:58:07.928Z
Updated: 2026-04-28T16:12:00.183Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47306 vulnerable 2026-06-03 14:57:00.959070 WordPress Secure Copy Content Protection and Content Locking plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Secure Copy Content Protection and Content Locking secure-copy-content-protection-subscribe-to-view allows Stored XSS.This issue affects Secure Copy Content Protection and Content Locking: from n/a through <= 4.2.3.
Published: 2024-10-06T11:33:10.464Z
Updated: 2026-04-28T16:10:18.380Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24484 vulnerable 2026-06-03 14:43:57.266767 Secure Copy Content Protection and Content Locking < 2.6.7 - Authenticated Blind SQL Injections
The get_reports() function in the Secure Copy Content Protection and Content Locking WordPress plugin before 2.6.7 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard
Published: 2021-08-02T10:32:23.000Z
Updated: 2024-08-03T19:35:19.550Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.