CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in wp-buy WP Content Copy Protection & No Right Click wp-content-copy-protector allows Cross Site Request Forgery.This issue affects WP Content Copy Protection & No Right Click: from n/a through <= 3.5.9.
Explanation of Vulnerability in Simple Terms
WP Content Copy Protection & No Right Click versions 3.5.9 and earlier are vulnerable to cross-site request forgery (CSRF) attacks. An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, performs unwanted actions on the site without the admin's knowledge or consent. This could allow modification of plugin settings or other administrative functions.
What an attacker can do
Perform unwanted administrative actions on the site by tricking a logged-in admin into visiting a malicious webpage.
Potential impact on your site
Plugin settings could be changed or administrative functions executed without your knowledge if you visit an untrusted link while logged in.
Conditions required to exploit
A site administrator must visit a malicious webpage while logged into WordPress.
Key dates
External resources
Related vulnerabilities
