CVE-2026-9269

The Secure Copy Content Protection and Content Locking WordPress plugin, in versions before 5.1.5 , is vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is a failure to properly sanitise and escape certain settings, specifically via the ays_sccp_sub_icon_image parameter. Th...