Vulnerabilities > WP BUY > WP Content Copy Protection NO Right Click > 2.2
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-08-05 | CVE-2023-36678 | Cross-site Scripting vulnerability in Wp-Buy WP Content Copy Protection & NO Right Click Auth. | 4.8 |
| 2022-02-21 | CVE-2022-23983 | Cross-Site Request Forgery (CSRF) vulnerability in Wp-Buy WP Content Copy Protection & NO Right Click Cross-Site Request Forgery (CSRF) vulnerability leading to plugin Settings Update discovered in WP Content Copy Protection & No Right Click WordPress plugin (versions <= 3.4.4). | 6.8 |
| 2021-05-14 | CVE-2021-24188 | Unspecified vulnerability in Wp-Buy WP Content Copy Protection & NO Right Click Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the WP Content Copy Protection & No Right Click WordPress plugin before 3.1.5, to install any plugin (including a specific version) from the WordPress repository, as well as activate arbitrary plugin from then blog, which helps attackers install vulnerable plugins and could lead to more critical vulnerabilities like RCE. | 6.5 |