CVE-2022-1906: Digiprove Copyright Proof

Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days.

The Copyright Proof WordPress plugin through 4.16 does not sanitise and escape a parameter before outputting it back via an AJAX action available to both unauthenticated and authenticated users, leading to a Reflected Cross-Site Scripting when a specific setting is enabled.

Affected products

• Digiprove Copyright Proof: up to and including 4.16

Published 2022-08-01. Last modified 2026-06-17.