CVE-2024-47306: falha de alta gravidade em Ays Pro Secure Copy Content Protection and…
WordPress Secure Copy Content Protection and Content Locking plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.1epss 0.3%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Secure Copy Content Protection and Content Locking secure-copy-content-protection-subscribe-to-view allows Stored XSS.This issue affects Secure Copy Content Protection and Content Locking: from n/a through <= 4.2.3.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Produtos afetados
Ays Pro · Secure Copy Content Protection and Content LockingCVEs relacionadas — Ays Pro Secure Copy Content Protection and…
No mesmo produto, das mais perigosas para as menos.
CVE-2021-24484—Secure Copy Content Protection and Content Locking < 2.6.7 - Authenticated Blind SQL InjectionsEPSS 1.3%CVE-2025-32133MEDIUMWordPress Secure Copy Content Protection and Content Locking plugin <= 4.5.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2025-30905HIGHWordPress Secure Copy Content Protection and Content Locking plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2026-25335MEDIUMWordPress Secure Copy Content Protection and Content Locking plugin <= 5.0.0 - Broken Access Control vulnerabilityEPSS 0.3%