← back
CVE-2024-6690mediumobserved exploitation

WP Content Copy Protection & No Right Click (premium) < 15.3 - Open Redirect

50Vexday Risk Score

Patch now. It exploitation observed by VulnCheck and has a working public exploit.

ssvc Actcvss 6.1epss 0.5%
from disclosure to weapon
Published on NVDMay 15
VulnCheck+197d
exploitation probability
0.5%top 60% of all CVEs
observed exploitation
yesVulnCheck
The wccp-pro WordPress plugin before 15.3 contains an open-redirect flaw via the referrer parameter, allowing redirection of users to external sites
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected products
Unknown · wccp-pro