Beta

Report

Secure Copy Content Protection and Content Locking <= 2.8.1 is vulnerable to Unauthenticated SQL Injection (SQLi) vulnerability

Unauthenticated
Published
2021-11-07

The Secure Copy Content Protection and Content Locking WordPress plugin before 2.8.2 does not escape the sccp_id parameter of the ays_sccp_results_export_file AJAX action (available to both unauthenticated and authenticated users) before using it in a SQL statement, leading to an SQL injection.

CVSS

Score:7.3

Severity:High

Version: 2.8.1

There is a patch available in v2.8.2 and we strongly recommend you update to this version as soon as possible.