CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Copy Content Protection Team Secure Copy Content Protection and Content Locking.This issue affects Secure Copy Content Protection and Content Locking: from n/a through 3.7.1.
Explanation of Vulnerability in Simple Terms
The Secure Copy Content Protection and Content Locking plugin for WordPress fails to properly check user permissions before allowing certain actions. A logged-in user with low privileges can modify content or settings they should not have access to. The vulnerability affects versions up to 3.7.1. Update to a version newer than 3.7.1 to resolve this issue.
What an attacker can do
A logged-in user can modify content or settings they lack permission to change.
Potential impact on your site
Unauthorized users may alter protected content, bypass content locking, or modify plugin settings.
Conditions required to exploit
Attacker must have a low-privilege account on the site (e.g., subscriber or contributor role).
Key dates
External resources
Related vulnerabilities
