CVE-2026-9269

The Secure Copy Content Protection and Content Locking WordPress plugin (versions before 5.1.5 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to properly sanitise and escape certain settings, specifically via the ays_sccp_sub_icon_image parameter. This allows h...