Log out
Get PRO

Latest

Input validation vulnerability in WP Content Copy Protection & No Right Click 3.5.5

  • Severity: medium-risk
  • Status: Fixed
  • Publication: July 4, 2023

The WP Content Copy Protection & No Right Click plugin for WordPress is vulnerable to an attack known as Stored Cross-Site Scripting. This attack can only be used by someone who has administrator access to the WordPress installation and if the ‘unfiltered_html’ feature has been disabled. When a user accesses an inject page, it can allow the attacker to run web scripts which can harm the website. This attack affects versions 3.5.5 and lower of the plugin.

Detected in:

WP Content Copy Protection & No Right Click fixed vulnerable versions: >= * <= 3.5.5

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.