Secure Copy Content Protection and Content Locking vulnerabilities

Product

Secure Copy Content Protection and Content Locking

by ays-pro · last CVE Feb 25, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities15 In the news0 Timeline

Severity mix

Critical 1High 4Medium 10Low 0

Severity

All severities15 Critical1 High4 Medium10 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Secure Copy Content Protection and Content Locking to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-24931	9.8	79%	Dec 6	Secure Copy Content Protection and Content Locking < 2.8.2 - Unauthenticated SQL Injection Affected: before 2.8.2
CVE-2026-1320	7.2	0%	Feb 12	Secure Copy Content Protection and Content Locking <= 4.9.8 - Unauthenticated Stored Cross-Site Scripting via X-Forwarded-For Header Affected: through 4.9.8
CVE-2021-24484	7.2	1%	Aug 2	Secure Copy Content Protection and Content Locking < 2.6.7 - Authenticated Blind SQL Injections Affected: 2.6.7 before 2.6.7
CVE-2025-30905	7.1	0%	Apr 1	WordPress Secure Copy Content Protection and Content Locking plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerability Affected: through 4.4.3
CVE-2024-47306	7.1	0%	Oct 6	WordPress Secure Copy Content Protection and Content Locking plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability Affected: through 4.2.3
CVE-2026-2367	6.4	0%	Feb 25	Secure Copy Content Protection and Content Locking <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute Affected: through 5.0.1
CVE-2025-32133	5.9	0%	Apr 4	WordPress Secure Copy Content Protection and Content Locking plugin <= 4.5.5 - Cross Site Scripting (XSS) vulnerability Affected: through 4.5.5
CVE-2025-14442	5.3	0%	Dec 12	Secure Copy Content Protection and Content Locking <= 4.9.2 - Unauthenticated Sensitive Information Exposure via Exposed CSV Export File Affected: through 4.9.2
CVE-2025-1404	5.3	0%	Mar 1	Secure Copy Content Protection and Content Locking <= 4.4.7 - Missing Authorization to Unauthenticated User Email Retrieval via ays_sccp_reports_user_search Function Affected: through 4.4.7
CVE-2024-33587	5.3	0%	Apr 29	WordPress Secure Copy Content Protection and Content Locking plugin <= 3.9.0 - Broken Access Control vulnerability Affected: through 3.9.0
CVE-2024-6889	4.8	0%	Sep 4	Secure Copy Content Protection and Content Locking < 4.1.7 - Admin+ Stored XSS Affected: before 4.1.7
CVE-2024-6888	4.8	0%	Sep 4	Secure Copy Content Protection and Content Locking < 4.1.7 - Admin+ Stored XSS Affected: before 4.1.7
CVE-2024-6138	4.8	0%	Jul 11	Secure Copy Content Protection < 4.0.9 - Admin+ Stored XSS Affected: before 4.0.9
CVE-2026-25335	4.3	0%	Feb 19	WordPress Secure Copy Content Protection and Content Locking plugin <= 5.0.0 - Broken Access Control vulnerability Affected: through 5.0.0
CVE-2025-14159	4.3	0%	Dec 12	Secure Copy Content Protection and Content Locking <= 4.9.2 - Cross-Site Request Forgery to Data Export Affected: through 4.9.2