CVE-2021-24931

🗓️ 06 Dec 2021 15:55:34Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 111 Views🌐 WEB

The Secure Copy Content Protection and Content Locking WordPress plugin before 2.8.2 is prone to SQL injection

Reporter	Title	Published	Views	Family All 18
0day.today	WordPress Secure Copy Content Protection and Content Locking 2.8.1 Plugin - SQL-Injection Exploit	10 Feb 202200:00	–	zdt
Circl	CVE-2021-24931	6 Dec 202118:20	–	circl
CNNVD	WordPress SQL注入漏洞	6 Dec 202100:00	–	cnnvd
CNVD	WordPress Secure Copy Content Protection and Content Locking plugin SQL injection vulnerability	9 Dec 202100:00	–	cnvd
Cvelist	CVE-2021-24931 Secure Copy Content Protection and Content Locking < 2.8.2 - Unauthenticated SQL Injection	6 Dec 202115:55	–	cvelist
Exploit DB	WordPress Plugin Secure Copy Content Protection and Content Locking 2.8.1 - SQL-Injection (Unauthenticated)	10 Feb 202200:00	–	exploitdb
Metasploit	Wordpress Secure Copy Content Protection and Content Locking sccp_id Unauthenticated SQLi	25 Feb 202217:43	–	metasploit
Nuclei	WordPress Secure Copy Content Protection and Content Locking <2.8.2 - SQL Injection	2 Jun 202610:14	–	nuclei
NVD	CVE-2021-24931	6 Dec 202116:15	–	nvd
Packet Storm	WordPress Secure Copy Content Protection And Content Locking 2.8.1 SQL Injection	10 Feb 202200:00	–	packetstorm

NVD

Vulners

Node

ays-pro secure_copy_content_protection_and_content_lockingRange<2.8.2wordpress

[
  {
    "product": "Secure Copy Content Protection and Content Locking",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "2.8.2",
        "status": "affected",
        "version": "2.8.2",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/1cd52d61-af75-43ed-9b99-b46c471c4231
packetstormsecurity	www.packetstormsecurity.com/files/165946/WordPress-Secure-Copy-Content-Protection-And-Content-Locking-2.8.1-SQL-Injection.html

Parameter	Position	Path	Description	CWE
sccp_id[]	query param	wp-admin/admin-ajax.php	SQL injection via unescaped sccp_id parameter in ays_sccp_results_export_file AJAX action	CWE-89

21 Nov 2024 05:54Current

9.7High risk

Vulners AI Score9.7

CVSS 27.5

CVSS 3.19.8

EPSS0.7216