CVE-2021-24931: Ays-Pro Secure Copy Content Protection And Content Locking

Critical severity, CVSS 9.8. EPSS: 78.8% chance of exploitation in the next 30 days.

The Secure Copy Content Protection and Content Locking WordPress plugin before 2.8.2 does not escape the sccp_id parameter of the ays_sccp_results_export_file AJAX action (available to both unauthenticated and authenticated users) before using it in a SQL statement, leading to an SQL injection.

Affected products

• Ays-Pro Secure Copy Content Protection And Content Locking: before 2.8.2 (fixed in 2.8.2)

Published 2021-12-06. Last modified 2026-06-17.