CVE-2024-49306 MEDIUM

CVE-2024-49306: WordPress WP Content Copy Protection & No Right Click plugin <= 3.5.9 - Cross Site Request Forgery (CSRF) vulnerability

Vendor Wp-Buy
Product WP Content Copy Protection & No Right Click
Weakness CWE-352 · CSRF
Published October 20, 2024
Last update April 28, 2026
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

What the vulnerability does

01Description

Cross-Site Request Forgery (CSRF) vulnerability in wp-buy WP Content Copy Protection & No Right Click wp-content-copy-protector allows Cross Site Request Forgery.This issue affects WP Content Copy Protection & No Right Click: from n/a through <= 3.5.9.

Key dates

02Disclosure timeline

October 20, 2024 CVE published
April 28, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2022-40724 Cross-Site Request Forgery on PingFederate Local Identity Profiles Endpoint. CVE-2026-1380 Bitcoin Donate Button <= 1.0 - Cross-Site Request Forgery to Settings Update CVE-2024-56206 WordPress gap-hub-user-role. plugin <= 3.4.1 - CSRF to Broken Authentication vulnerability CVE-2022-38468 WordPress NextGEN Gallery Plugin <= 3.28 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2016-20051 Snews CMS 1.7 Cross-Site Request Forgery via changeup