Medium · 5.9 CVE-2023-36678 EUVD-2023-40621GHSA-7c2j-j52x-qgm9

WordPress WP Content Copy Protection & No Right Click Plugin <= 3.5.5 is vulnerable to Cross Site Scripting (XSS)

Published Aug 5, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP-buy WP Content Copy Protection & No Right Click plugin <= 3.5.5 versions.

Vendor	Product	Affected	Fixed
WP-buy	WP Content Copy Protection & No Right Click	≤ 3.5.5	—