Report
The Secure Copy Content Protection and Content Locking WordPress plugin before 2.8.2 does not escape the sccp_id parameter of the ays_sccp_results_export_file AJAX action (available to both unauthenticated and authenticated users) before using it in a SQL statement, leading to an SQL injection.
Score:7.3
Severity:High
Version: 2.8.1
There is a patch available in v2.8.2 and we strongly recommend you update to this version as soon as possible.