Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:secure_copy_content_protection_and_content_locking:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductSecure Copy Content Protection And Content Locking (96c02b19-7959-5cea-b8c9-5fb1375a1671)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-9269 vulnerable 2026-07-29 01:09:06.962341 Secure Copy Content Protection and Content Locking < 5.1.5 - Admin+ Stored XSS via ays_sccp_sub_icon_image Parameter
The Secure Copy Content Protection and Content Locking WordPress plugin before 5.1.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Published: 2026-06-12T06:00:01.871Z
Updated: 2026-06-12T14:00:15.476Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6889 vulnerable 2026-06-08 06:58:20.664243 Secure Copy Content Protection and Content Locking < 4.1.7 - Admin+ Stored XSS
The Secure Copy Content Protection and Content Locking WordPress plugin before 4.1.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Published: 2024-09-04T06:00:04.054Z
Updated: 2024-09-04T14:46:34.608Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6888 vulnerable 2026-06-08 06:58:20.663611 Secure Copy Content Protection and Content Locking < 4.1.7 - Admin+ Stored XSS
The Secure Copy Content Protection and Content Locking WordPress plugin before 4.1.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Published: 2024-09-04T06:00:03.859Z
Updated: 2024-09-04T14:41:05.863Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6138 vulnerable 2026-06-08 06:58:17.924504 Secure Copy Content Protection < 4.0.9 - Admin+ Stored XSS
The Secure Copy Content Protection and Content Locking WordPress plugin before 4.0.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Published: 2024-07-11T06:00:04.534Z
Updated: 2024-08-01T21:33:05.210Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24931 vulnerable 2026-06-08 05:30:39.641412 Secure Copy Content Protection and Content Locking < 2.8.2 - Unauthenticated SQL Injection
The Secure Copy Content Protection and Content Locking WordPress plugin before 2.8.2 does not escape the sccp_id parameter of the ays_sccp_results_export_file AJAX action (available to both unauthenticated and authenticated users) before using it in a SQL statement, leading to an SQL injection.
Published: 2021-12-06T15:55:34.000Z
Updated: 2024-08-03T19:49:14.241Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.