Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-23983 EUVD-2022-28898GHSA-r86j-7668-2hrf

WordPress WP Content Copy Protection & No Right Click plugin <= 3.4.4 - Cross-Site Request Forgery (CSRF) leads to Settings Update vulnerability

Published Feb 21, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: wp-buy Product: WP Content Copy Protection & No Right Click (WordPress plugin) Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability leading to plugin Settings Update discovered in WP Content Copy Protection & No Right Click WordPress plugin (versions <= 3.4.4).

Affected products

VendorProductAffectedFixed
WP-buy WP Content Copy Protection & No Right Click (WordPress plugin) <= 3.4.4 – ≤ 3.4.4 —

References