CVE-2026-9269

Published Jun 12, 2026

Last updated 2 days ago

CVSS low 3.5

Overview

Description
The Secure Copy Content Protection and Content Locking WordPress plugin before 5.1.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Source
contact@wpscan.com
NVD status
Deferred

Risk scores

CVSS 3.1

Type
Secondary
Base score
3.5
Impact score
2.5
Exploitability score
0.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N
Severity
LOW

Social media

Hype score
Not currently trending

  1. 🚨*CVE* CVE-2026-9269 The Secure Copy Content Protection and Content Locking WordPress plugin before 5.1.5 does not sanitise and escape some of its settings, which could allow high privilege… https://t.co/J5NqTnAyQY ----- Traducción: CVE-2026-9269 El … https://t.co/utmtNg

    @infoflowcloud

    12 Jun 2026

    20 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References

Sources include official advisories and independent security research.