EUVD-2026-8519

The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'aysblock' shortcode in all versions up to, and including, 5.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This...

CVE-2026-2367

CVE-2026-2367 is a stored cross-site scripting (XSS) vulnerability in the WordPress plugin Secure Copy Content Protection and Content Locking (auth level: Contributor+). The issue arises from insufficient input sanitization and output escaping for attributes passed to the plugin’s shortcodes (not...

PT-2026-21894

The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ays block' shortcode in all versions up to, and including, 5.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This...