CVE-2021-24333: Content Copy Protection & Prevent Image Save Project Content Copy Protection & Prevent Image Save

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

The Content Copy Protection & Prevent Image Save WordPress plugin through 1.3 does not check for CSRF when saving its settings, not perform any validation and sanitisation on them, allowing attackers to make a logged in administrator set arbitrary XSS payloads in them.

Affected products

• Content Copy Protection & Prevent Image Save Project Content Copy Protection & Prevent Image Save: up to and including 1.3

Published 2021-06-01. Last modified 2026-06-17.