CVE-2021-24931

The Secure Copy Content Protection and Content Locking WordPress plugin before 2.8.2 does not escape the sccp_id parameter of the ays_sccp_results_export_file AJAX action (available to both unauthenticated and authenticated users) before using it in a SQL statement, leading to an SQL injection.

• CWE-89

• http://packetstormsecurity.com/files/165946/WordPress-Secure-Copy-Content-Protection-And-Content-Locking-2.8.1-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://wpscan.com/vulnerability/1cd52d61-af75-43ed-9b99-b46c471c4231Exploit, Third Party Advisory
• http://packetstormsecurity.com/files/165946/WordPress-Secure-Copy-Content-Protection-And-Content-Locking-2.8.1-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://wpscan.com/vulnerability/1cd52d61-af75-43ed-9b99-b46c471c4231Exploit, Third Party Advisory

Published

Dec 6, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-24924The Email Log WordPress plugin before 2.4.8 does not escape …6.1
• CVE-2021-24925The Modern Events Calendar Lite WordPress plugin before 6.1.…6.1
• CVE-2021-24926The Domain Check WordPress plugin before 1.0.17 does not san…6.1
• CVE-2021-24927The My Calendar WordPress plugin before 3.2.18 does not sani…5.4
• CVE-2021-24928The Rearrange Woocommerce Products WordPress plugin before 3…6.5
• CVE-2021-24930The WordPress Online Booking and Scheduling Plugin WordPress…5.4
• CVE-2021-24932The Auto Featured Image (Auto Post Thumbnail) WordPress plug…6.1
• CVE-2021-24933The Dynamic Widgets WordPress plugin through 1.5.16 does not…5.4
• CVE-2021-24934The Visual CSS Style Editor WordPress plugin before 7.5.4 do…6.1
• CVE-2021-24935The WP Google Fonts WordPress plugin before 3.1.5 does not e…6.1
• CVE-2021-24936The WP Extra File Types WordPress plugin before 0.5.1 does n…8
• CVE-2021-24937The Asset CleanUp: Page Speed Booster WordPress plugin befor…6.1