What’s Vulnerable › Products
ays-pro Secure Copy Content Protection and Content Locking vulnerabilities
16 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.
Check whether your ays-pro Secure Copy Content Protection and Content Locking version is affected
Latest ays-pro Secure Copy Content Protection and Content Locking vulnerabilities
- CVE-2026-9269 — Secure Copy Content Protection and Content Locking < 5.1.5 - Admin+ Stored XSS via ays_sccp_sub_icon_image Parameter (CVSS 3.5)
- CVE-2026-2367 — Secure Copy Content Protection and Content Locking <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute (CVSS 6.4)
- CVE-2026-25335 — WordPress Secure Copy Content Protection and Content Locking plugin <= 5.0.0 - Broken Access Control vulnerability (CVSS 4.3)
- CVE-2026-1320 — Secure Copy Content Protection and Content Locking <= 4.9.8 - Unauthenticated Stored Cross-Site Scripting via X-Forwarded-For Header (CVSS 7.2)
- CVE-2025-14442 — Secure Copy Content Protection and Content Locking <= 4.9.2 - Unauthenticated Sensitive Information Exposure via Exposed CSV Export File (CVSS 5.3)
- CVE-2025-14159 — Secure Copy Content Protection and Content Locking <= 4.9.2 - Cross-Site Request Forgery to Data Export (CVSS 4.3)
- CVE-2025-32133 — WordPress Secure Copy Content Protection and Content Locking plugin <= 4.5.5 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
- CVE-2025-30905 — WordPress Secure Copy Content Protection and Content Locking plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2025-1404 — Secure Copy Content Protection and Content Locking <= 4.4.7 - Missing Authorization to Unauthenticated User Email Retrieval via ays_sccp_reports_user_search Function (CVSS 5.3)
- CVE-2024-47306 — WordPress Secure Copy Content Protection and Content Locking plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2024-6889 — Secure Copy Content Protection and Content Locking < 4.1.7 - Admin+ Stored XSS (CVSS 4.8)
- CVE-2024-6888 — Secure Copy Content Protection and Content Locking < 4.1.7 - Admin+ Stored XSS (CVSS 4.8)
- CVE-2024-6138 — Secure Copy Content Protection < 4.0.9 - Admin+ Stored XSS (CVSS 4.8)
- CVE-2024-33587 — WordPress Secure Copy Content Protection and Content Locking plugin <= 3.9.0 - Broken Access Control vulnerability (CVSS 5.3)
- CVE-2021-24931 — Secure Copy Content Protection and Content Locking < 2.8.2 - Unauthenticated SQL Injection (CVSS 9.8)
- CVE-2021-24484 — Secure Copy Content Protection and Content Locking < 2.6.7 - Authenticated Blind SQL Injections (CVSS 7.2)