Approved changes feed: RSS · Atom

cpe:2.3:a:copy_content_protection_team:secure_copy_content_protection_and_content_locking:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCopy Content Protection Team (1fe2f2fe-2de8-5000-bbe8-a77dbcedfce1)
ProductSecure Copy Content Protection And Content Locking (fb6d3297-2b49-54b4-83c7-dbf578436dd1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6889 vulnerable 2026-06-08 06:58:20.664192 Secure Copy Content Protection and Content Locking < 4.1.7 - Admin+ Stored XSS
The Secure Copy Content Protection and Content Locking WordPress plugin before 4.1.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Published: 2024-09-04T06:00:04.054Z
Updated: 2024-09-04T14:46:34.608Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6888 vulnerable 2026-06-08 06:58:20.663440 Secure Copy Content Protection and Content Locking < 4.1.7 - Admin+ Stored XSS
The Secure Copy Content Protection and Content Locking WordPress plugin before 4.1.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Published: 2024-09-04T06:00:03.859Z
Updated: 2024-09-04T14:41:05.863Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47306 vulnerable 2026-06-08 06:48:11.738076 WordPress Secure Copy Content Protection and Content Locking plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Secure Copy Content Protection and Content Locking secure-copy-content-protection-subscribe-to-view allows Stored XSS.This issue affects Secure Copy Content Protection and Content Locking: from n/a through <= 4.2.3.
Published: 2024-10-06T11:33:10.464Z
Updated: 2026-04-28T16:10:18.380Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33587 vulnerable 2026-06-08 06:37:31.701879 WordPress Secure Copy Content Protection and Content Locking plugin <= 3.9.0 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in Copy Content Protection Team Secure Copy Content Protection and Content Locking.This issue affects Secure Copy Content Protection and Content Locking: from n/a through 3.9.0.
Published: 2024-04-29T12:40:46.720Z
Updated: 2026-04-28T16:09:43.414Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32787 vulnerable 2026-06-08 06:37:23.995057 WordPress Secure Copy Content Protection and Content Locking plugin <= 3.7.1 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in Copy Content Protection Team Secure Copy Content Protection and Content Locking.This issue affects Secure Copy Content Protection and Content Locking: from n/a through 3.7.1.
Published: 2024-06-09T13:00:51.640Z
Updated: 2026-04-28T16:09:40.099Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.