CVE-2023-36678

26th percentile - higher than 26% of all known CVEs

The WP-buy WP Content Copy Protection & No Right Click plugin versions up to 3.5.5 contains a stored Cross-Site Scripting (XSS) vulnerability with admin-level permissions. An attacker can exploit this vulnerability to inject malicious scripts that will be executed in the context of users visiting the site.

This vulnerability could lead to the theft of user data and session hijacking, posing a serious threat to the organization's security. If exploited, an attacker could gain access to sensitive information.

It is recommended to update the WP-buy WP Content Copy Protection & No Right Click plugin to the latest version to mitigate this vulnerability. Additionally, conducting a security audit of the application is advisable to identify other potential vulnerabilities.